[jira] [Commented] (FALCON-1601) Make Falcon StateStore more secure by not disclosing imp params in startup.props

["pavan kumar kolamuri (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/FALCON-1601?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15044504#comment-15044504 ] 

pavan kumar kolamuri commented on FALCON-1601:
----------------------------------------------

Hi team , i have discussed with [~sriksun]  about this and he suggested an approach.

1) Create a credentials file where all credentials for DB should be stored.
2) Set the permission of this file to 400 owned by falcon user.
3) Make startup.properties point to this file. 

I am convinced with this approach. Thoughts please.

> Make Falcon StateStore more secure by not disclosing imp params in startup.props 
> ---------------------------------------------------------------------------------
>
>                 Key: FALCON-1601
>                 URL: https://issues.apache.org/jira/browse/FALCON-1601
>             Project: Falcon
>          Issue Type: Improvement
>            Reporter: pavan kumar kolamuri
>
> We are bringing Falcon state Store DB for Native Scheduler as part of https://issues.apache.org/jira/browse/FALCON-1234, We need to add more secureness by removing password properties from startup props and also made this Statestore supports Mysql as well.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)