You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@storm.apache.org by ka...@apache.org on 2018/02/21 04:44:48 UTC
[1/2] storm git commit: STORM-2960 Stress importance of setting up
proper OS account for Storm processes
Repository: storm
Updated Branches:
refs/heads/1.0.x-branch c2b2f4036 -> 05120d33f
STORM-2960 Stress importance of setting up proper OS account for Storm processes
Project: http://git-wip-us.apache.org/repos/asf/storm/repo
Commit: http://git-wip-us.apache.org/repos/asf/storm/commit/f1b27301
Tree: http://git-wip-us.apache.org/repos/asf/storm/tree/f1b27301
Diff: http://git-wip-us.apache.org/repos/asf/storm/diff/f1b27301
Branch: refs/heads/1.0.x-branch
Commit: f1b273017b01be16e0ce83c86291147b3c21cafd
Parents: c2b2f40
Author: Jungtaek Lim <ka...@gmail.com>
Authored: Mon Feb 19 20:31:36 2018 +0900
Committer: Jungtaek Lim <ka...@gmail.com>
Committed: Wed Feb 21 13:44:38 2018 +0900
----------------------------------------------------------------------
docs/SECURITY.md | 3 +++
1 file changed, 3 insertions(+)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/storm/blob/f1b27301/docs/SECURITY.md
----------------------------------------------------------------------
diff --git a/docs/SECURITY.md b/docs/SECURITY.md
index 6532987..d7485a5 100644
--- a/docs/SECURITY.md
+++ b/docs/SECURITY.md
@@ -17,6 +17,9 @@ Authentication and Authorization. But to do so usually requires
configuring your Operating System to restrict the operations that can be done.
This is generally a good idea even if you plan on running your cluster with Auth.
+Storm's OS level security relies on running Storm processes using OS accounts that have only the permissions they need.
+Note that workers run under the same OS account as the Supervisor daemon by default.
+
The exact detail of how to setup these precautions varies a lot and is beyond
the scope of this document.
[2/2] storm git commit: Merge branch 'STORM-2960-1.0.x-merge' into
1.0.x-branch
Posted by ka...@apache.org.
Merge branch 'STORM-2960-1.0.x-merge' into 1.0.x-branch
Project: http://git-wip-us.apache.org/repos/asf/storm/repo
Commit: http://git-wip-us.apache.org/repos/asf/storm/commit/05120d33
Tree: http://git-wip-us.apache.org/repos/asf/storm/tree/05120d33
Diff: http://git-wip-us.apache.org/repos/asf/storm/diff/05120d33
Branch: refs/heads/1.0.x-branch
Commit: 05120d33f0c6b9c89329d31269802af810f24ad2
Parents: c2b2f40 f1b2730
Author: Jungtaek Lim <ka...@gmail.com>
Authored: Wed Feb 21 13:44:42 2018 +0900
Committer: Jungtaek Lim <ka...@gmail.com>
Committed: Wed Feb 21 13:44:42 2018 +0900
----------------------------------------------------------------------
docs/SECURITY.md | 3 +++
1 file changed, 3 insertions(+)
----------------------------------------------------------------------