dlmarion commented on code in PR #6490: URL: https://github.com/apache/accumulo/pull/6490#discussion_r3639591321
########## SECURITY.md: ########## @@ -0,0 +1,56 @@ +## Reporting a vulnerability + +If after reading this document you believe you have found a vulnerability or are unsure, +then please follow the [reporting process](https://www.apache.org/security/#reporting-a-vulnerability). + +## High-Level Accumulo Deployment Overview + +Accumulo is designed to use Apache ZooKeeper for locking and coordination +and one or more Hadoop Compatible File System (HCFS) implementations +(HDFS, S3, local disk, etc.) for storage. Accumulo users could be humans +or machines connecting to Accumulo server processes from any location. +Please see the Security section of the User Manual for information +regarding: + + * User authentication + * Authorizing actions and our permission scheme + * Labeling data and scan-time authorizations + * Encryption + +## Security Assumptions + +The following items are out of our control and we assume that these items +are configured correctly and securely or are otherwise trusted. + + * Network, to include network encryption components + * DNS + * Operating Systems and related compute hardware + * ZooKeeper and HCFS storage configured for Accumulo's use Review Comment: ```suggestion * ZooKeeper and HCFS installations and configuration ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
