You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by Abhay Kulkarni <ak...@hortonworks.com> on 2018/02/20 23:08:53 UTC

Review Request 65724: Fix insecure randomness

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/65724/
-----------------------------------------------------------

Review request for ranger, Madhan Neethiraj and Velmurugan Periasamy.


Bugs: RANGER-1988
    https://issues.apache.org/jira/browse/RANGER-1988


Repository: ranger


Description
-------

The random number generator implemented by random() cannot withstand a cryptographic attack. It is more secure to replace it with SecureRandom class.


Diffs
-----

  hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java 0bc3b31 


Diff: https://reviews.apache.org/r/65724/diff/1/


Testing
-------

Ran all unit tests successfully


Thanks,

Abhay Kulkarni


Re: Review Request 65724: Fix insecure randomness

Posted by Ramesh Mani <rm...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/65724/#review197824
-----------------------------------------------------------


Ship it!




Ship It!

- Ramesh Mani


On Feb. 20, 2018, 11:08 p.m., Abhay Kulkarni wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/65724/
> -----------------------------------------------------------
> 
> (Updated Feb. 20, 2018, 11:08 p.m.)
> 
> 
> Review request for ranger, Madhan Neethiraj and Velmurugan Periasamy.
> 
> 
> Bugs: RANGER-1988
>     https://issues.apache.org/jira/browse/RANGER-1988
> 
> 
> Repository: ranger
> 
> 
> Description
> -------
> 
> The random number generator implemented by random() cannot withstand a cryptographic attack. It is more secure to replace it with SecureRandom class.
> 
> 
> Diffs
> -----
> 
>   hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java 0bc3b31 
> 
> 
> Diff: https://reviews.apache.org/r/65724/diff/1/
> 
> 
> Testing
> -------
> 
> Ran all unit tests successfully
> 
> 
> Thanks,
> 
> Abhay Kulkarni
> 
>