You are viewing a plain text version of this content. The canonical link for it is here.
Posted to general@hadoop.apache.org by Steve Loughran <st...@apache.org> on 2009/08/25 12:40:07 UTC

Hadoop security list?

Assuming that eventually Hadoop will add security, are there plans for a 
hadoop security list?

In the mean time, if anyone were to have concerns about a bit of the 
system, should they just go as JIRA issues on the relevant project?

Re: Hadoop security list?

Posted by Amr Awadallah <aa...@cloudera.com>.
I propose we just use general@ for now for security announcements until 
it deserves getting its own list.

-- amr
> Nico Coetzee wrote:
>> Perhaps a stupid question, but what do you mean by "security"? If you 
>> run
>> Hadoop on Linux there is a lot of things you can to "secure" your 
>> cluster.
>>
>
> where to report security issues with Hadoop?
>
> Some asf projects have them - httpd, tomcat, ws, others dont (ant, 
> log4j). I'm wondering where hadoop fits in on this scale of things


Re: Hadoop security list?

Posted by Steve Loughran <st...@apache.org>.
Nico Coetzee wrote:
> Perhaps a stupid question, but what do you mean by "security"? If you run
> Hadoop on Linux there is a lot of things you can to "secure" your cluster.
> 

where to report security issues with Hadoop?

Some asf projects have them - httpd, tomcat, ws, others dont (ant, 
log4j). I'm wondering where hadoop fits in on this scale of things

Re: Hadoop security list?

Posted by Nico Coetzee <ni...@gmail.com>.
Perhaps a stupid question, but what do you mean by "security"? If you run
Hadoop on Linux there is a lot of things you can to "secure" your cluster.


On Tue, Aug 25, 2009 at 12:40 PM, Steve Loughran <st...@apache.org> wrote:

>
> Assuming that eventually Hadoop will add security, are there plans for a
> hadoop security list?
>
> In the mean time, if anyone were to have concerns about a bit of the
> system, should they just go as JIRA issues on the relevant project?
>