[ https://issues.apache.org/jira/browse/HADOOP-9621?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13681165#comment-13681165 ]
Kevin Minder commented on HADOOP-9621: -------------------------------------- We are certainly using that doc as input but we are trying to provide more detail around Hadoop 2.x security. I just attached the current working version of what Kyle and I have come up with so far. We are using a gdoc for this. https://docs.google.com/a/hortonworks.com/document/d/1POyKfDxZaMNVJi-4c2mpJUfuSBch1arW-pc5xvUKNno/edit# We would love some community review and contribution as we are basically documenting what we are seing as we dig through the code. > Document/analyze current Hadoop security model > ---------------------------------------------- > > Key: HADOOP-9621 > URL: https://issues.apache.org/jira/browse/HADOOP-9621 > Project: Hadoop Common > Issue Type: Task > Components: security > Reporter: Brian Swan > Priority: Minor > Labels: documentation > Attachments: HadoopSecurityAnalysis-20130612.pdf > > Original Estimate: 336h > Remaining Estimate: 336h > > In light of the proposed changes to Hadoop security in Hadoop-9533 and > Hadoop-9392, having a common, detailed understanding (in the form of a > document) of the benefits/drawbacks of the current security model and how it > works would be useful. The document should address all security principals, > their authentication mechanisms, and handling of shared secrets through the > lens of the following principles: Minimize attack surface area, Establish > secure defaults, Principle of Least privilege, Principle of Defense in depth, > Fail securely, Don’t trust services, Separation of duties, Avoid security by > obscurity, Keep security simple, Fix security issues correctly. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira