diff --git a/bindep.txt b/bindep.txt
index 1c22a170..38e544eb 100644
--- a/bindep.txt
+++ b/bindep.txt
@@ -2,5 +2,6 @@
 # see http://docs.openstack.org/infra/bindep/ for additional information.
 
 gettext
+rsync
 zlib-devel [platform:rpm]
 zlib1g-dev [platform:dpkg]
diff --git a/security-guide/source/management/continuous-systems-management.rst b/security-guide/source/management/continuous-systems-management.rst
index ce73d26b..094f8140 100644
--- a/security-guide/source/management/continuous-systems-management.rst
+++ b/security-guide/source/management/continuous-systems-management.rst
@@ -187,7 +187,7 @@ use it.
 
 There are many configuration management solutions; at the time of this
 writing there are two in the marketplace that are robust in their
-support of OpenStack environments: :term:`Chef` and :term:`Puppet`. A
+support of OpenStack environments: Chef and :term:`Puppet`. A
 non-exhaustive listing of tools in this space is provided below:
 
 -  Chef
diff --git a/tox.ini b/tox.ini
index 281053cf..a9223448 100644
--- a/tox.ini
+++ b/tox.ini
@@ -8,7 +8,7 @@ basepython = python3
 setenv =
    VIRTUAL_ENV={envdir}
 deps = -r{toxinidir}/test-requirements.txt
-whitelist_externals =
+allowlist_externals =
   bash
   cp
   mkdir
@@ -25,6 +25,7 @@ commands =
      doc8 -e '' security-threat-analysis
 
 [testenv:publishdocs]
+allowlist_externals = {toxinidir}/tools/build-all-rst.sh
 # Prepare all documents so that they can get published on
 # docs.openstack.org with just copying publish-docs/* over.
 commands =
@@ -33,17 +34,18 @@ commands =
 
 [testenv:buildlang]
 # Run as "tox -e buildlang -- $LANG"
-whitelist_externals =
+allowlist_externals =
     doc-tools-check-languages
     bash
 commands =
     doc-tools-check-languages doc-tools-check-languages.conf test {posargs}
 
 [testenv:publishlang]
-whitelist_externals = doc-tools-check-languages
+allowlist_externals = doc-tools-check-languages
 commands = doc-tools-check-languages doc-tools-check-languages.conf test all
 
 [testenv:docs]
+allowlist_externals = {toxinidir}/tools/build-all-rst.sh
 commands =
   # Build and copy RST Guides
   {toxinidir}/tools/build-all-rst.sh
@@ -55,7 +57,7 @@ commands = {toxinidir}/tools/generatepot-rst.sh {posargs}
 
 [doc8]
 # Settings for doc8:
-# This file has extra long lines that cannot be avoided, let's white list it.
+# These files have extra long lines that cannot be avoided, let's ignore them.
 ignore-path = security-notes/OSSN-0047,security-notes/OSSN-0068,common,security-guide/build,security-threat-analysis/build
 # File extensions to use
 extensions = .rst,.txt