Ensure that doc linting is included in the linters test

The 'docs' tox target executes the doc8 lint test which may result in
failures when testing documentation builds, but OpenStack-CI does not
execute that tox target.

In order to ensure that we catch all standard documentation syntax
errors and prevent them from merging, this patch includes the docs
target in the 'linters' chain of tests.

Fixes for any failures which result from executing this test are also
included in the patch.

Change-Id: I80c2ce387e59a30c34bf2252a54037c00b420380

doc/source/controls-cat1.rst

@@ -4,208 +4,606 @@
 Category 1 (Low) controls
 ================================
 
-.. toctree::
-   :maxdepth: 1
-
 .. include:: stig-notes/V-38437.rst
 
+.. include:: stig-notes/V-38437_developer.rst
+
+----
+
 .. include:: stig-notes/V-38438.rst
 
+.. include:: stig-notes/V-38438_developer.rst
+
+----
+
 .. include:: stig-notes/V-38447.rst
 
+.. include:: stig-notes/V-38447_developer.rst
+
+----
+
 .. include:: stig-notes/V-38452.rst
 
+.. include:: stig-notes/V-38452_developer.rst
+
+----
+
 .. include:: stig-notes/V-38453.rst
 
+.. include:: stig-notes/V-38453_developer.rst
+
+----
+
 .. include:: stig-notes/V-38454.rst
 
+.. include:: stig-notes/V-38454_developer.rst
+
+----
+
 .. include:: stig-notes/V-38455.rst
 
+.. include:: stig-notes/V-38455_developer.rst
+
+----
+
 .. include:: stig-notes/V-38456.rst
 
+.. include:: stig-notes/V-38456_developer.rst
+
+----
+
 .. include:: stig-notes/V-38460.rst
 
+.. include:: stig-notes/V-38460_developer.rst
+
+----
+
 .. include:: stig-notes/V-38463.rst
 
+.. include:: stig-notes/V-38463_developer.rst
+
+----
+
 .. include:: stig-notes/V-38467.rst
 
+.. include:: stig-notes/V-38467_developer.rst
+
+----
+
 .. include:: stig-notes/V-38471.rst
 
+.. include:: stig-notes/V-38471_developer.rst
+
+----
+
 .. include:: stig-notes/V-38473.rst
 
+.. include:: stig-notes/V-38473_developer.rst
+
+----
+
 .. include:: stig-notes/V-38474.rst
 
+.. include:: stig-notes/V-38474_developer.rst
+
+----
+
 .. include:: stig-notes/V-38478.rst
 
+.. include:: stig-notes/V-38478_developer.rst
+
+----
+
 .. include:: stig-notes/V-38480.rst
 
+.. include:: stig-notes/V-38480_developer.rst
+
+----
+
 .. include:: stig-notes/V-38482.rst
 
+.. include:: stig-notes/V-38482_developer.rst
+
+----
+
 .. include:: stig-notes/V-38487.rst
 
+.. include:: stig-notes/V-38487_developer.rst
+
+----
+
 .. include:: stig-notes/V-38494.rst
 
+.. include:: stig-notes/V-38494_developer.rst
+
+----
+
 .. include:: stig-notes/V-38516.rst
 
+.. include:: stig-notes/V-38516_developer.rst
+
+----
+
 .. include:: stig-notes/V-38522.rst
 
+.. include:: stig-notes/V-38522_developer.rst
+
+----
+
 .. include:: stig-notes/V-38525.rst
 
+.. include:: stig-notes/V-38525_developer.rst
+
+----
+
 .. include:: stig-notes/V-38527.rst
 
+.. include:: stig-notes/V-38527_developer.rst
+
+----
+
 .. include:: stig-notes/V-38528.rst
 
+.. include:: stig-notes/V-38528_developer.rst
+
+----
+
 .. include:: stig-notes/V-38530.rst
 
+.. include:: stig-notes/V-38530_developer.rst
+
+----
+
 .. include:: stig-notes/V-38531.rst
 
+.. include:: stig-notes/V-38531_developer.rst
+
+----
+
 .. include:: stig-notes/V-38533.rst
 
+.. include:: stig-notes/V-38533_developer.rst
+
+----
+
 .. include:: stig-notes/V-38534.rst
 
+.. include:: stig-notes/V-38534_developer.rst
+
+----
+
 .. include:: stig-notes/V-38535.rst
 
+.. include:: stig-notes/V-38535_developer.rst
+
+----
+
 .. include:: stig-notes/V-38536.rst
 
+.. include:: stig-notes/V-38536_developer.rst
+
+----
+
 .. include:: stig-notes/V-38537.rst
 
+.. include:: stig-notes/V-38537_developer.rst
+
+----
+
 .. include:: stig-notes/V-38538.rst
 
+.. include:: stig-notes/V-38538_developer.rst
+
+----
+
 .. include:: stig-notes/V-38540.rst
 
+.. include:: stig-notes/V-38540_developer.rst
+
+----
+
 .. include:: stig-notes/V-38541.rst
 
+.. include:: stig-notes/V-38541_developer.rst
+
+----
+
 .. include:: stig-notes/V-38543.rst
 
+.. include:: stig-notes/V-38543_developer.rst
+
+----
+
 .. include:: stig-notes/V-38545.rst
 
+.. include:: stig-notes/V-38545_developer.rst
+
+----
+
 .. include:: stig-notes/V-38547.rst
 
+.. include:: stig-notes/V-38547_developer.rst
+
+----
+
 .. include:: stig-notes/V-38550.rst
 
+.. include:: stig-notes/V-38550_developer.rst
+
+----
+
 .. include:: stig-notes/V-38552.rst
 
+.. include:: stig-notes/V-38552_developer.rst
+
+----
+
 .. include:: stig-notes/V-38554.rst
 
+.. include:: stig-notes/V-38554_developer.rst
+
+----
+
 .. include:: stig-notes/V-38556.rst
 
+.. include:: stig-notes/V-38556_developer.rst
+
+----
+
 .. include:: stig-notes/V-38557.rst
 
+.. include:: stig-notes/V-38557_developer.rst
+
+----
+
 .. include:: stig-notes/V-38558.rst
 
+.. include:: stig-notes/V-38558_developer.rst
+
+----
+
 .. include:: stig-notes/V-38559.rst
 
+.. include:: stig-notes/V-38559_developer.rst
+
+----
+
 .. include:: stig-notes/V-38561.rst
 
+.. include:: stig-notes/V-38561_developer.rst
+
+----
+
 .. include:: stig-notes/V-38563.rst
 
+.. include:: stig-notes/V-38563_developer.rst
+
+----
+
 .. include:: stig-notes/V-38565.rst
 
+.. include:: stig-notes/V-38565_developer.rst
+
+----
+
 .. include:: stig-notes/V-38566.rst
 
+.. include:: stig-notes/V-38566_developer.rst
+
+----
+
 .. include:: stig-notes/V-38567.rst
 
+.. include:: stig-notes/V-38567_developer.rst
+
+----
+
 .. include:: stig-notes/V-38568.rst
 
+.. include:: stig-notes/V-38568_developer.rst
+
+----
+
 .. include:: stig-notes/V-38569.rst
 
+.. include:: stig-notes/V-38569_developer.rst
+
+----
+
 .. include:: stig-notes/V-38570.rst
 
+.. include:: stig-notes/V-38570_developer.rst
+
+----
+
 .. include:: stig-notes/V-38571.rst
 
+.. include:: stig-notes/V-38571_developer.rst
+
+----
+
 .. include:: stig-notes/V-38572.rst
 
+.. include:: stig-notes/V-38572_developer.rst
+
+----
+
 .. include:: stig-notes/V-38575.rst
 
+.. include:: stig-notes/V-38575_developer.rst
+
+----
+
 .. include:: stig-notes/V-38578.rst
 
+.. include:: stig-notes/V-38578_developer.rst
+
+----
+
 .. include:: stig-notes/V-38584.rst
 
+.. include:: stig-notes/V-38584_developer.rst
+
+----
+
 .. include:: stig-notes/V-38590.rst
 
+.. include:: stig-notes/V-38590_developer.rst
+
+----
+
 .. include:: stig-notes/V-38608.rst
 
+.. include:: stig-notes/V-38608_developer.rst
+
+----
+
 .. include:: stig-notes/V-38610.rst
 
+.. include:: stig-notes/V-38610_developer.rst
+
+----
+
 .. include:: stig-notes/V-38616.rst
 
+.. include:: stig-notes/V-38616_developer.rst
+
+----
+
 .. include:: stig-notes/V-38618.rst
 
+.. include:: stig-notes/V-38618_developer.rst
+
+----
+
 .. include:: stig-notes/V-38624.rst
 
+.. include:: stig-notes/V-38624_developer.rst
+
+----
+
 .. include:: stig-notes/V-38627.rst
 
+.. include:: stig-notes/V-38627_developer.rst
+
+----
+
 .. include:: stig-notes/V-38635.rst
 
+.. include:: stig-notes/V-38635_developer.rst
+
+----
+
 .. include:: stig-notes/V-38639.rst
 
+.. include:: stig-notes/V-38639_developer.rst
+
+----
+
 .. include:: stig-notes/V-38640.rst
 
+.. include:: stig-notes/V-38640_developer.rst
+
+----
+
 .. include:: stig-notes/V-38641.rst
 
+.. include:: stig-notes/V-38641_developer.rst
+
+----
+
 .. include:: stig-notes/V-38642.rst
 
+.. include:: stig-notes/V-38642_developer.rst
+
+----
+
 .. include:: stig-notes/V-38644.rst
 
+.. include:: stig-notes/V-38644_developer.rst
+
+----
+
 .. include:: stig-notes/V-38645.rst
 
+.. include:: stig-notes/V-38645_developer.rst
+
+----
+
 .. include:: stig-notes/V-38646.rst
 
+.. include:: stig-notes/V-38646_developer.rst
+
+----
+
 .. include:: stig-notes/V-38647.rst
 
+.. include:: stig-notes/V-38647_developer.rst
+
+----
+
 .. include:: stig-notes/V-38648.rst
 
+.. include:: stig-notes/V-38648_developer.rst
+
+----
+
 .. include:: stig-notes/V-38649.rst
 
+.. include:: stig-notes/V-38649_developer.rst
+
+----
+
 .. include:: stig-notes/V-38650.rst
 
+.. include:: stig-notes/V-38650_developer.rst
+
+----
+
 .. include:: stig-notes/V-38651.rst
 
+.. include:: stig-notes/V-38651_developer.rst
+
+----
+
 .. include:: stig-notes/V-38655.rst
 
+.. include:: stig-notes/V-38655_developer.rst
+
+----
+
 .. include:: stig-notes/V-38656.rst
 
+.. include:: stig-notes/V-38656_developer.rst
+
+----
+
 .. include:: stig-notes/V-38657.rst
 
+.. include:: stig-notes/V-38657_developer.rst
+
+----
+
 .. include:: stig-notes/V-38659.rst
 
+.. include:: stig-notes/V-38659_developer.rst
+
+----
+
 .. include:: stig-notes/V-38661.rst
 
+.. include:: stig-notes/V-38661_developer.rst
+
+----
+
 .. include:: stig-notes/V-38662.rst
 
+.. include:: stig-notes/V-38662_developer.rst
+
+----
+
 .. include:: stig-notes/V-38669.rst
 
+.. include:: stig-notes/V-38669_developer.rst
+
+----
+
 .. include:: stig-notes/V-38672.rst
 
+.. include:: stig-notes/V-38672_developer.rst
+
+----
+
 .. include:: stig-notes/V-38675.rst
 
+.. include:: stig-notes/V-38675_developer.rst
+
+----
+
 .. include:: stig-notes/V-38676.rst
 
+.. include:: stig-notes/V-38676_developer.rst
+
+----
+
 .. include:: stig-notes/V-38681.rst
 
+.. include:: stig-notes/V-38681_developer.rst
+
+----
+
 .. include:: stig-notes/V-38683.rst
 
+.. include:: stig-notes/V-38683_developer.rst
+
+----
+
 .. include:: stig-notes/V-38684.rst
 
+.. include:: stig-notes/V-38684_developer.rst
+
+----
+
 .. include:: stig-notes/V-38685.rst
 
+.. include:: stig-notes/V-38685_developer.rst
+
+----
+
 .. include:: stig-notes/V-38687.rst
 
+.. include:: stig-notes/V-38687_developer.rst
+
+----
+
 .. include:: stig-notes/V-38690.rst
 
+.. include:: stig-notes/V-38690_developer.rst
+
+----
+
 .. include:: stig-notes/V-38692.rst
 
+.. include:: stig-notes/V-38692_developer.rst
+
+----
+
 .. include:: stig-notes/V-38693.rst
 
+.. include:: stig-notes/V-38693_developer.rst
+
+----
+
 .. include:: stig-notes/V-38694.rst
 
+.. include:: stig-notes/V-38694_developer.rst
+
+----
+
 .. include:: stig-notes/V-38697.rst
 
+.. include:: stig-notes/V-38697_developer.rst
+
+----
+
 .. include:: stig-notes/V-38699.rst
 
+.. include:: stig-notes/V-38699_developer.rst
+
+----
+
 .. include:: stig-notes/V-38702.rst
 
+.. include:: stig-notes/V-38702_developer.rst
+
+----
+
 .. include:: stig-notes/V-51369.rst
 
+.. include:: stig-notes/V-51369_developer.rst
+
+----
+
 .. include:: stig-notes/V-51379.rst
 
+.. include:: stig-notes/V-51379_developer.rst

doc/source/controls-cat2.rst

@@ -9,293 +9,874 @@ Category 2 (Medium) controls
 
 .. include:: stig-notes/V-38439.rst
 
+.. include:: stig-notes/V-38439_developer.rst
+
+----
+
 .. include:: stig-notes/V-38443.rst
 
+.. include:: stig-notes/V-38443_developer.rst
+
+----
+
 .. include:: stig-notes/V-38444.rst
 
+.. include:: stig-notes/V-38444_developer.rst
+
+----
+
 .. include:: stig-notes/V-38445.rst
 
+.. include:: stig-notes/V-38445_developer.rst
+
+----
+
 .. include:: stig-notes/V-38446.rst
 
+.. include:: stig-notes/V-38446_developer.rst
+
+----
+
 .. include:: stig-notes/V-38448.rst
 
+.. include:: stig-notes/V-38448_developer.rst
+
+----
+
 .. include:: stig-notes/V-38449.rst
 
+.. include:: stig-notes/V-38449_developer.rst
+
+----
+
 .. include:: stig-notes/V-38450.rst
 
+.. include:: stig-notes/V-38450_developer.rst
+
+----
+
 .. include:: stig-notes/V-38451.rst
 
+.. include:: stig-notes/V-38451_developer.rst
+
+----
+
 .. include:: stig-notes/V-38457.rst
 
+.. include:: stig-notes/V-38457_developer.rst
+
+----
+
 .. include:: stig-notes/V-38458.rst
 
+.. include:: stig-notes/V-38458_developer.rst
+
+----
+
 .. include:: stig-notes/V-38459.rst
 
+.. include:: stig-notes/V-38459_developer.rst
+
+----
+
 .. include:: stig-notes/V-38461.rst
 
+.. include:: stig-notes/V-38461_developer.rst
+
+----
+
 .. include:: stig-notes/V-38464.rst
 
+.. include:: stig-notes/V-38464_developer.rst
+
+----
+
 .. include:: stig-notes/V-38465.rst
 
+.. include:: stig-notes/V-38465_developer.rst
+
+----
+
 .. include:: stig-notes/V-38466.rst
 
+.. include:: stig-notes/V-38466_developer.rst
+
+----
+
 .. include:: stig-notes/V-38468.rst
 
+.. include:: stig-notes/V-38468_developer.rst
+
+----
+
 .. include:: stig-notes/V-38469.rst
 
+.. include:: stig-notes/V-38469_developer.rst
+
+----
+
 .. include:: stig-notes/V-38470.rst
 
+.. include:: stig-notes/V-38470_developer.rst
+
+----
+
 .. include:: stig-notes/V-38472.rst
 
+.. include:: stig-notes/V-38472_developer.rst
+
+----
+
 .. include:: stig-notes/V-38475.rst
 
+.. include:: stig-notes/V-38475_developer.rst
+
+----
+
 .. include:: stig-notes/V-38477.rst
 
+.. include:: stig-notes/V-38477_developer.rst
+
+----
+
 .. include:: stig-notes/V-38479.rst
 
+.. include:: stig-notes/V-38479_developer.rst
+
+----
+
 .. include:: stig-notes/V-38481.rst
 
+.. include:: stig-notes/V-38481_developer.rst
+
+----
+
 .. include:: stig-notes/V-38483.rst
 
+.. include:: stig-notes/V-38483_developer.rst
+
+----
+
 .. include:: stig-notes/V-38484.rst
 
+.. include:: stig-notes/V-38484_developer.rst
+
+----
+
 .. include:: stig-notes/V-38486.rst
 
+.. include:: stig-notes/V-38486_developer.rst
+
+----
+
 .. include:: stig-notes/V-38488.rst
 
+.. include:: stig-notes/V-38488_developer.rst
+
+----
+
 .. include:: stig-notes/V-38489.rst
 
+.. include:: stig-notes/V-38489_developer.rst
+
+----
+
 .. include:: stig-notes/V-38490.rst
 
+.. include:: stig-notes/V-38490_developer.rst
+
+----
+
 .. include:: stig-notes/V-38492.rst
 
+.. include:: stig-notes/V-38492_developer.rst
+
+----
+
 .. include:: stig-notes/V-38493.rst
 
+.. include:: stig-notes/V-38493_developer.rst
+
+----
+
 .. include:: stig-notes/V-38495.rst
 
+.. include:: stig-notes/V-38495_developer.rst
+
+----
+
 .. include:: stig-notes/V-38496.rst
 
+.. include:: stig-notes/V-38496_developer.rst
+
+----
+
 .. include:: stig-notes/V-38498.rst
 
+.. include:: stig-notes/V-38498_developer.rst
+
+----
+
 .. include:: stig-notes/V-38499.rst
 
+.. include:: stig-notes/V-38499_developer.rst
+
+----
+
 .. include:: stig-notes/V-38500.rst
 
+.. include:: stig-notes/V-38500_developer.rst
+
+----
+
 .. include:: stig-notes/V-38501.rst
 
+.. include:: stig-notes/V-38501_developer.rst
+
+----
+
 .. include:: stig-notes/V-38502.rst
 
+.. include:: stig-notes/V-38502_developer.rst
+
+----
+
 .. include:: stig-notes/V-38503.rst
 
+.. include:: stig-notes/V-38503_developer.rst
+
+----
+
 .. include:: stig-notes/V-38504.rst
 
+.. include:: stig-notes/V-38504_developer.rst
+
+----
+
 .. include:: stig-notes/V-38511.rst
 
+.. include:: stig-notes/V-38511_developer.rst
+
+----
+
 .. include:: stig-notes/V-38512.rst
 
+.. include:: stig-notes/V-38512_developer.rst
+
+----
+
 .. include:: stig-notes/V-38513.rst
 
+.. include:: stig-notes/V-38513_developer.rst
+
+----
+
 .. include:: stig-notes/V-38514.rst
 
+.. include:: stig-notes/V-38514_developer.rst
+
+----
+
 .. include:: stig-notes/V-38515.rst
 
+.. include:: stig-notes/V-38515_developer.rst
+
+----
+
 .. include:: stig-notes/V-38517.rst
 
+.. include:: stig-notes/V-38517_developer.rst
+
+----
+
 .. include:: stig-notes/V-38518.rst
 
+.. include:: stig-notes/V-38518_developer.rst
+
+----
+
 .. include:: stig-notes/V-38519.rst
 
+.. include:: stig-notes/V-38519_developer.rst
+
+----
+
 .. include:: stig-notes/V-38520.rst
 
+.. include:: stig-notes/V-38520_developer.rst
+
+----
+
 .. include:: stig-notes/V-38521.rst
 
+.. include:: stig-notes/V-38521_developer.rst
+
+----
+
 .. include:: stig-notes/V-38523.rst
 
+.. include:: stig-notes/V-38523_developer.rst
+
+----
+
 .. include:: stig-notes/V-38524.rst
 
+.. include:: stig-notes/V-38524_developer.rst
+
+----
+
 .. include:: stig-notes/V-38526.rst
 
+.. include:: stig-notes/V-38526_developer.rst
+
+----
+
 .. include:: stig-notes/V-38529.rst
 
+.. include:: stig-notes/V-38529_developer.rst
+
+----
+
 .. include:: stig-notes/V-38532.rst
 
+.. include:: stig-notes/V-38532_developer.rst
+
+----
+
 .. include:: stig-notes/V-38539.rst
 
+.. include:: stig-notes/V-38539_developer.rst
+
+----
+
 .. include:: stig-notes/V-38542.rst
 
+.. include:: stig-notes/V-38542_developer.rst
+
+----
+
 .. include:: stig-notes/V-38544.rst
 
+.. include:: stig-notes/V-38544_developer.rst
+
+----
+
 .. include:: stig-notes/V-38546.rst
 
+.. include:: stig-notes/V-38546_developer.rst
+
+----
+
 .. include:: stig-notes/V-38548.rst
 
+.. include:: stig-notes/V-38548_developer.rst
+
+----
+
 .. include:: stig-notes/V-38549.rst
 
+.. include:: stig-notes/V-38549_developer.rst
+
+----
+
 .. include:: stig-notes/V-38551.rst
 
+.. include:: stig-notes/V-38551_developer.rst
+
+----
+
 .. include:: stig-notes/V-38553.rst
 
+.. include:: stig-notes/V-38553_developer.rst
+
+----
+
 .. include:: stig-notes/V-38555.rst
 
+.. include:: stig-notes/V-38555_developer.rst
+
+----
+
 .. include:: stig-notes/V-38560.rst
 
+.. include:: stig-notes/V-38560_developer.rst
+
+----
+
 .. include:: stig-notes/V-38573.rst
 
+.. include:: stig-notes/V-38573_developer.rst
+
+----
+
 .. include:: stig-notes/V-38574.rst
 
+.. include:: stig-notes/V-38574_developer.rst
+
+----
+
 .. include:: stig-notes/V-38576.rst
 
+.. include:: stig-notes/V-38576_developer.rst
+
+----
+
 .. include:: stig-notes/V-38577.rst
 
+.. include:: stig-notes/V-38577_developer.rst
+
+----
+
 .. include:: stig-notes/V-38579.rst
 
+.. include:: stig-notes/V-38579_developer.rst
+
+----
+
 .. include:: stig-notes/V-38580.rst
 
+.. include:: stig-notes/V-38580_developer.rst
+
+----
+
 .. include:: stig-notes/V-38581.rst
 
+.. include:: stig-notes/V-38581_developer.rst
+
+----
+
 .. include:: stig-notes/V-38582.rst
 
+.. include:: stig-notes/V-38582_developer.rst
+
+----
+
 .. include:: stig-notes/V-38583.rst
 
+.. include:: stig-notes/V-38583_developer.rst
+
+----
+
 .. include:: stig-notes/V-38585.rst
 
+.. include:: stig-notes/V-38585_developer.rst
+
+----
+
 .. include:: stig-notes/V-38586.rst
 
+.. include:: stig-notes/V-38586_developer.rst
+
+----
+
 .. include:: stig-notes/V-38588.rst
 
+.. include:: stig-notes/V-38588_developer.rst
+
+----
+
 .. include:: stig-notes/V-38592.rst
 
+.. include:: stig-notes/V-38592_developer.rst
+
+----
+
 .. include:: stig-notes/V-38593.rst
 
+.. include:: stig-notes/V-38593_developer.rst
+
+----
+
 .. include:: stig-notes/V-38595.rst
 
+.. include:: stig-notes/V-38595_developer.rst
+
+----
+
 .. include:: stig-notes/V-38596.rst
 
+.. include:: stig-notes/V-38596_developer.rst
+
+----
+
 .. include:: stig-notes/V-38597.rst
 
+.. include:: stig-notes/V-38597_developer.rst
+
+----
+
 .. include:: stig-notes/V-38599.rst
 
+.. include:: stig-notes/V-38599_developer.rst
+
+----
+
 .. include:: stig-notes/V-38600.rst
 
+.. include:: stig-notes/V-38600_developer.rst
+
+----
+
 .. include:: stig-notes/V-38601.rst
 
+.. include:: stig-notes/V-38601_developer.rst
+
+----
+
 .. include:: stig-notes/V-38603.rst
 
+.. include:: stig-notes/V-38603_developer.rst
+
+----
+
 .. include:: stig-notes/V-38604.rst
 
+.. include:: stig-notes/V-38604_developer.rst
+
+----
+
 .. include:: stig-notes/V-38605.rst
 
+.. include:: stig-notes/V-38605_developer.rst
+
+----
+
 .. include:: stig-notes/V-38606.rst
 
+.. include:: stig-notes/V-38606_developer.rst
+
+----
+
 .. include:: stig-notes/V-38609.rst
 
+.. include:: stig-notes/V-38609_developer.rst
+
+----
+
 .. include:: stig-notes/V-38611.rst
 
+.. include:: stig-notes/V-38611_developer.rst
+
+----
+
 .. include:: stig-notes/V-38612.rst
 
+.. include:: stig-notes/V-38612_developer.rst
+
+----
+
 .. include:: stig-notes/V-38613.rst
 
+.. include:: stig-notes/V-38613_developer.rst
+
+----
+
 .. include:: stig-notes/V-38615.rst
 
+.. include:: stig-notes/V-38615_developer.rst
+
+----
+
 .. include:: stig-notes/V-38617.rst
 
+.. include:: stig-notes/V-38617_developer.rst
+
+----
+
 .. include:: stig-notes/V-38619.rst
 
+.. include:: stig-notes/V-38619_developer.rst
+
+----
+
 .. include:: stig-notes/V-38620.rst
 
+.. include:: stig-notes/V-38620_developer.rst
+
+----
+
 .. include:: stig-notes/V-38621.rst
 
+.. include:: stig-notes/V-38621_developer.rst
+
+----
+
 .. include:: stig-notes/V-38622.rst
 
+.. include:: stig-notes/V-38622_developer.rst
+
+----
+
 .. include:: stig-notes/V-38623.rst
 
+.. include:: stig-notes/V-38623_developer.rst
+
+----
+
 .. include:: stig-notes/V-38625.rst
 
+.. include:: stig-notes/V-38625_developer.rst
+
+----
+
 .. include:: stig-notes/V-38626.rst
 
+.. include:: stig-notes/V-38626_developer.rst
+
+----
+
 .. include:: stig-notes/V-38628.rst
 
+.. include:: stig-notes/V-38628_developer.rst
+
+----
+
 .. include:: stig-notes/V-38629.rst
 
+.. include:: stig-notes/V-38629_developer.rst
+
+----
+
 .. include:: stig-notes/V-38630.rst
 
+.. include:: stig-notes/V-38630_developer.rst
+
+----
+
 .. include:: stig-notes/V-38631.rst
 
+.. include:: stig-notes/V-38631_developer.rst
+
+----
+
 .. include:: stig-notes/V-38632.rst
 
+.. include:: stig-notes/V-38632_developer.rst
+
+----
+
 .. include:: stig-notes/V-38633.rst
 
+.. include:: stig-notes/V-38633_developer.rst
+
+----
+
 .. include:: stig-notes/V-38634.rst
 
+.. include:: stig-notes/V-38634_developer.rst
+
+----
+
 .. include:: stig-notes/V-38636.rst
 
+.. include:: stig-notes/V-38636_developer.rst
+
+----
+
 .. include:: stig-notes/V-38637.rst
 
+.. include:: stig-notes/V-38637_developer.rst
+
+----
+
 .. include:: stig-notes/V-38638.rst
 
+.. include:: stig-notes/V-38638_developer.rst
+
+----
+
 .. include:: stig-notes/V-38643.rst
 
+.. include:: stig-notes/V-38643_developer.rst
+
+----
+
 .. include:: stig-notes/V-38652.rst
 
+.. include:: stig-notes/V-38652_developer.rst
+
+----
+
 .. include:: stig-notes/V-38654.rst
 
+.. include:: stig-notes/V-38654_developer.rst
+
+----
+
 .. include:: stig-notes/V-38658.rst
 
+.. include:: stig-notes/V-38658_developer.rst
+
+----
+
 .. include:: stig-notes/V-38660.rst
 
+.. include:: stig-notes/V-38660_developer.rst
+
+----
+
 .. include:: stig-notes/V-38663.rst
 
+.. include:: stig-notes/V-38663_developer.rst
+
+----
+
 .. include:: stig-notes/V-38664.rst
 
+.. include:: stig-notes/V-38664_developer.rst
+
+----
+
 .. include:: stig-notes/V-38665.rst
 
+.. include:: stig-notes/V-38665_developer.rst
+
+----
+
 .. include:: stig-notes/V-38667.rst
 
+.. include:: stig-notes/V-38667_developer.rst
+
+----
+
 .. include:: stig-notes/V-38670.rst
 
+.. include:: stig-notes/V-38670_developer.rst
+
+----
+
 .. include:: stig-notes/V-38671.rst
 
+.. include:: stig-notes/V-38671_developer.rst
+
+----
+
 .. include:: stig-notes/V-38673.rst
 
+.. include:: stig-notes/V-38673_developer.rst
+
+----
+
 .. include:: stig-notes/V-38674.rst
 
+.. include:: stig-notes/V-38674_developer.rst
+
+----
+
 .. include:: stig-notes/V-38678.rst
 
+.. include:: stig-notes/V-38678_developer.rst
+
+----
+
 .. include:: stig-notes/V-38679.rst
 
+.. include:: stig-notes/V-38679_developer.rst
+
+----
+
 .. include:: stig-notes/V-38680.rst
 
+.. include:: stig-notes/V-38680_developer.rst
+
+----
+
 .. include:: stig-notes/V-38682.rst
 
+.. include:: stig-notes/V-38682_developer.rst
+
+----
+
 .. include:: stig-notes/V-38686.rst
 
+.. include:: stig-notes/V-38686_developer.rst
+
+----
+
 .. include:: stig-notes/V-38688.rst
 
+.. include:: stig-notes/V-38688_developer.rst
+
+----
+
 .. include:: stig-notes/V-38689.rst
 
+.. include:: stig-notes/V-38689_developer.rst
+
+----
+
 .. include:: stig-notes/V-38691.rst
 
+.. include:: stig-notes/V-38691_developer.rst
+
+----
+
 .. include:: stig-notes/V-38695.rst
 
+.. include:: stig-notes/V-38695_developer.rst
+
+----
+
 .. include:: stig-notes/V-38696.rst
 
+.. include:: stig-notes/V-38696_developer.rst
+
+----
+
 .. include:: stig-notes/V-38698.rst
 
+.. include:: stig-notes/V-38698_developer.rst
+
+----
+
 .. include:: stig-notes/V-38700.rst
 
+.. include:: stig-notes/V-38700_developer.rst
+
+----
+
 .. include:: stig-notes/V-43150.rst
 
+.. include:: stig-notes/V-43150_developer.rst
+
+----
+
 .. include:: stig-notes/V-51337.rst
 
+.. include:: stig-notes/V-51337_developer.rst
+
+----
+
 .. include:: stig-notes/V-51363.rst
 
+.. include:: stig-notes/V-51363_developer.rst
+
+----
+
 .. include:: stig-notes/V-51391.rst
 
+.. include:: stig-notes/V-51391_developer.rst
+
+----
+
 .. include:: stig-notes/V-51875.rst
 
+.. include:: stig-notes/V-51875_developer.rst
+
+----
+
 .. include:: stig-notes/V-54381.rst
 
+.. include:: stig-notes/V-54381_developer.rst
+
+----
+
 .. include:: stig-notes/V-57569.rst
 
+.. include:: stig-notes/V-57569_developer.rst
+
+----
+
 .. include:: stig-notes/V-58901.rst
 
+.. include:: stig-notes/V-58901_developer.rst

doc/source/controls-cat3.rst

@@ -9,35 +9,100 @@ Category 3 (High) controls
 
 .. include:: stig-notes/V-38462.rst
 
+.. include:: stig-notes/V-38462_developer.rst
+
+----
+
 .. include:: stig-notes/V-38476.rst
 
+.. include:: stig-notes/V-38476_developer.rst
+
+----
+
 .. include:: stig-notes/V-38491.rst
 
+.. include:: stig-notes/V-38491_developer.rst
+
+----
+
 .. include:: stig-notes/V-38497.rst
 
+.. include:: stig-notes/V-38497_developer.rst
+
+----
+
 .. include:: stig-notes/V-38587.rst
 
+.. include:: stig-notes/V-38587_developer.rst
+
+----
+
 .. include:: stig-notes/V-38589.rst
 
+.. include:: stig-notes/V-38589_developer.rst
+
+----
+
 .. include:: stig-notes/V-38591.rst
 
+.. include:: stig-notes/V-38591_developer.rst
+
+----
+
 .. include:: stig-notes/V-38594.rst
 
+.. include:: stig-notes/V-38594_developer.rst
+
+----
+
 .. include:: stig-notes/V-38598.rst
 
+.. include:: stig-notes/V-38598_developer.rst
+
+----
+
 .. include:: stig-notes/V-38602.rst
 
+.. include:: stig-notes/V-38602_developer.rst
+
+----
+
 .. include:: stig-notes/V-38607.rst
 
+.. include:: stig-notes/V-38607_developer.rst
+
+----
+
 .. include:: stig-notes/V-38614.rst
 
+.. include:: stig-notes/V-38614_developer.rst
+
+----
+
 .. include:: stig-notes/V-38653.rst
 
+.. include:: stig-notes/V-38653_developer.rst
+
+----
+
 .. include:: stig-notes/V-38666.rst
 
+.. include:: stig-notes/V-38666_developer.rst
+
+----
+
 .. include:: stig-notes/V-38668.rst
 
+.. include:: stig-notes/V-38668_developer.rst
+
+----
+
 .. include:: stig-notes/V-38677.rst
 
+.. include:: stig-notes/V-38677_developer.rst
+
+----
+
 .. include:: stig-notes/V-38701.rst
 
+.. include:: stig-notes/V-38701_developer.rst

doc/source/developer-notes/V-38452.rst

@@ -1 +0,0 @@
-V-38447.rst

doc/source/developer-notes/V-38454.rst

@@ -1 +0,0 @@
-V-38447.rst

doc/source/developer-notes/V-38513.rst

@@ -1 +0,0 @@
-V-38512.rst

doc/source/developer-notes/V-38519.rst

@@ -1 +0,0 @@
-V-38518.rst

doc/source/developer-notes/V-38521.rst

@@ -1 +0,0 @@
-V-38520.rst

doc/source/developer-notes/V-38526.rst

@@ -1 +0,0 @@
-V-38523.rst

doc/source/developer-notes/V-38529.rst

@@ -1 +0,0 @@
-V-38523.rst

doc/source/developer-notes/V-38532.rst

@@ -1 +0,0 @@
-V-38523.rst

doc/source/developer-notes/V-38533.rst

@@ -1 +0,0 @@
-V-38523.rst

doc/source/developer-notes/V-38542.rst

@@ -1 +0,0 @@
-V-38523.rst

doc/source/developer-notes/V-38544.rst

@@ -1 +0,0 @@
-V-38523.rst

doc/source/developer-notes/V-38547.rst

@@ -1 +0,0 @@
-V-38543.rst

doc/source/developer-notes/V-38550.rst

@@ -1 +0,0 @@
-V-38543.rst

doc/source/developer-notes/V-38553.rst

@@ -1 +0,0 @@
-V-38549.rst

doc/source/developer-notes/V-38560.rst

@@ -1 +0,0 @@
-V-38555.rst

doc/source/developer-notes/V-38569.rst

@@ -1 +0,0 @@
-V-38482.rst

doc/source/developer-notes/V-38570.rst

@@ -1 +0,0 @@
-V-38482.rst

doc/source/developer-notes/V-38571.rst

@@ -1 +0,0 @@
-V-38482.rst

doc/source/developer-notes/V-38572.rst

@@ -1 +0,0 @@
-V-38482.rst

doc/source/developer-notes/V-38573.rst

@@ -1 +0,0 @@
-V-38501.rst

doc/source/developer-notes/V-38626.rst

@@ -1 +0,0 @@
-V-38625.rst

doc/source/developer-notes/V-38630.rst

@@ -1 +0,0 @@
-V-38629.rst

doc/source/developer-notes/V-38638.rst

@@ -1 +0,0 @@
-V-38629.rst

doc/source/developer-notes/V-38639.rst

@@ -1 +0,0 @@
-V-38629.rst

doc/source/developer-notes/V-38661.rst

@@ -1 +0,0 @@
-V-38659.rst

doc/source/developer-notes/V-38662.rst

@@ -1 +0,0 @@
-V-38659.rst

doc/source/developer-notes/V-38663.rst

@@ -1 +0,0 @@
-V-38453.rst

doc/source/developer-notes/V-38664.rst

@@ -1 +0,0 @@
-V-38453.rst

doc/source/developer-notes/V-38665.rst

@@ -1 +0,0 @@
-V-38453.rst

doc/source/developer-notes/V-38686.rst

@@ -1 +0,0 @@
-V-38512.rst

doc/source/developer-notes/V-38688.rst

@@ -1 +0,0 @@
-V-38629.rst

doc/source/developer-notes/V-38689.rst

@@ -1 +0,0 @@
-V-38629.rst

doc/source/developer-notes/V-38690.rst

@@ -1 +0,0 @@
-V-38685.rst

doc/source/developer-notes/V-38693.rst

@@ -1 +0,0 @@
-V-38482.rst

doc/source/developer-notes/V-38694.rst

@@ -1 +0,0 @@
-V-38692.rst

doc/source/developer-notes/V-38695.rst

@@ -1 +0,0 @@
-V-38670.rst

doc/source/developer-notes/V-38696.rst

@@ -1 +0,0 @@
-V-38670.rst

doc/source/developer-notes/V-38698.rst

@@ -1 +0,0 @@
-V-38670.rst

doc/source/developer-notes/V-38700.rst

@@ -1 +0,0 @@
-V-38670.rst

doc/source/developer-notes/V-43150.rst

@@ -1 +0,0 @@
-V-38629.rst

doc/source/developer-notes/V-51875.rst

@@ -1 +0,0 @@
-V-38484.rst

doc/source/index.rst

@@ -5,8 +5,9 @@ Security hardening for OpenStack-Ansible
 Abstract
 ~~~~~~~~
 
-The openstack-ansible-security role provides security hardening for `OpenStack`_
-environments deployed with `openstack-ansible`_.  The role has multiple goals:
+The openstack-ansible-security role provides security hardening for
+`OpenStack`_ environments deployed with `openstack-ansible`_.  The role has
+multiple goals:
 
 * Provide additional security in a highly configurable, integrated way without
   disrupting a production OpenStack environment.
@@ -16,7 +17,8 @@ environments deployed with `openstack-ansible`_.  The role has multiple goals:
   security configuration changes to apply.
 
 At this time, the role follows the requirements of the US Government's
-`Security Technical Implementation Guide (STIG)`_ for Red Hat Enterprise Linux 6.
+`Security Technical Implementation Guide (STIG)`_ for Red Hat Enterprise Linux
+6.
 
 The easiest method for reviewing the STIG configurations and the relevant
 metadata is through the `STIG Viewer`_ service provided by `UCF`_.

doc/source/stig-notes/V-38437.rst

@@ -18,5 +18,3 @@ Details: `V-38437 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38437.rst

doc/source/stig-notes/V-38438.rst

@@ -12,5 +12,3 @@ Details: `V-38438 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38438.rst

doc/source/stig-notes/V-38439.rst

@@ -14,5 +14,3 @@ Details: `V-38439 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38439.rst

doc/source/stig-notes/V-38443.rst

@@ -10,5 +10,3 @@ Details: `V-38443 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38443.rst

doc/source/stig-notes/V-38444.rst

@@ -12,5 +12,3 @@ Details: `V-38444 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38444.rst

doc/source/stig-notes/V-38445.rst

@@ -10,5 +10,3 @@ Details: `V-38445 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38445.rst

doc/source/stig-notes/V-38446.rst

@@ -11,5 +11,3 @@ Details: `V-38446 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38446.rst

doc/source/stig-notes/V-38447.rst

@@ -11,5 +11,3 @@ Details: `V-38447 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38447.rst

doc/source/stig-notes/V-38448.rst

@@ -10,5 +10,3 @@ Details: `V-38448 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38448.rst

doc/source/stig-notes/V-38449.rst

@@ -10,5 +10,3 @@ Details: `V-38449 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38449.rst

doc/source/stig-notes/V-38450.rst

@@ -11,5 +11,3 @@ Details: `V-38450 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38450.rst

doc/source/stig-notes/V-38451.rst

@@ -11,5 +11,3 @@ Details: `V-38451 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38451.rst

doc/source/stig-notes/V-38452.rst

@@ -12,5 +12,3 @@ Details: `V-38452 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38452.rst

doc/source/stig-notes/V-38452_developer.rst

@@ -0,0 +1,20 @@
+**Exception**
+
+Although Ubuntu provides the ``debsums`` command for checking the contents of
+files installed from packages, it cannot perform a detailed level of checking
+sufficient to meet the STIG requirement. Some packages are not shipped with MD5
+checksums for all files. Deployers are encouraged to use ``debsums -c``
+regularly to check for alterations in as many packages as possible.
+
+Ubuntu does not currently have a capability to check file permissions,
+ownership, or group ownership against the permissions that were originally set
+when the package was installed.
+
+In CentOS, the ``rpm`` command can verify package contents, ownership, group
+ownership, and permissions after the package has been installed. However, many
+configuration files are changed by the security role and this will cause the
+verification to fail.
+
+Deployers should utilize the monitoring capabilities of the ``aide`` package
+(which is installed by other Ansible tasks in this role) to determine which
+configuration files, libraries or binaries may have been changed.

doc/source/stig-notes/V-38453.rst

@@ -12,5 +12,3 @@ Details: `V-38453 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38453.rst

doc/source/stig-notes/V-38454.rst

@@ -12,5 +12,3 @@ Details: `V-38454 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38454.rst

doc/source/stig-notes/V-38454_developer.rst

@@ -0,0 +1,20 @@
+**Exception**
+
+Although Ubuntu provides the ``debsums`` command for checking the contents of
+files installed from packages, it cannot perform a detailed level of checking
+sufficient to meet the STIG requirement. Some packages are not shipped with MD5
+checksums for all files. Deployers are encouraged to use ``debsums -c``
+regularly to check for alterations in as many packages as possible.
+
+Ubuntu does not currently have a capability to check file permissions,
+ownership, or group ownership against the permissions that were originally set
+when the package was installed.
+
+In CentOS, the ``rpm`` command can verify package contents, ownership, group
+ownership, and permissions after the package has been installed. However, many
+configuration files are changed by the security role and this will cause the
+verification to fail.
+
+Deployers should utilize the monitoring capabilities of the ``aide`` package
+(which is installed by other Ansible tasks in this role) to determine which
+configuration files, libraries or binaries may have been changed.

doc/source/stig-notes/V-38455.rst

@@ -11,5 +11,3 @@ Details: `V-38455 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38455.rst

doc/source/stig-notes/V-38456.rst

@@ -13,5 +13,3 @@ Details: `V-38456 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38456.rst

doc/source/stig-notes/V-38456_developer.rst

@@ -6,4 +6,3 @@ configuration is skipped.
 However, deployers are strongly urged to consider creating a separate
 partition and/or LVM logical volume for ``/var`` during installation of the OS
 if possible.
-

doc/source/stig-notes/V-38457.rst

@@ -12,5 +12,3 @@ Details: `V-38457 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38457.rst

doc/source/stig-notes/V-38458.rst

@@ -11,5 +11,3 @@ Details: `V-38458 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38458.rst

doc/source/stig-notes/V-38459.rst

@@ -11,5 +11,3 @@ Details: `V-38459 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38459.rst

doc/source/stig-notes/V-38459_developer.rst

@@ -1 +1,2 @@
-The tasks in file_perms.yml will ensure that "/etc/group" is owned by the root account.
+The tasks in file_perms.yml will ensure that "/etc/group" is owned by
+the root account.

doc/source/stig-notes/V-38460.rst

@@ -10,5 +10,3 @@ Details: `V-38460 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38460.rst

doc/source/stig-notes/V-38461.rst

@@ -11,5 +11,3 @@ Details: `V-38461 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38461.rst

doc/source/stig-notes/V-38462.rst

@@ -11,5 +11,3 @@ Details: `V-38462 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38462.rst

doc/source/stig-notes/V-38463.rst

@@ -10,5 +10,3 @@ Details: `V-38463 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38463.rst

doc/source/stig-notes/V-38464.rst

@@ -10,5 +10,3 @@ Details: `V-38464 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38464.rst

doc/source/stig-notes/V-38465.rst

@@ -11,5 +11,3 @@ Details: `V-38465 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38465.rst

doc/source/stig-notes/V-38466.rst

@@ -11,5 +11,3 @@ Details: `V-38466 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38466.rst

doc/source/stig-notes/V-38467.rst

@@ -11,5 +11,3 @@ Details: `V-38467 in STIG Viewer`_.
 
 Notes for deployers
 ~~~~~~~~~~~~~~~~~~~
-
-.. include:: /developer-notes/V-38467.rst