[email protected] has posted comments on this change. ( http://gerrit.cloudera.org:8080/24413 )
Change subject: Add security threat model and wire AGENTS.md -> SECURITY.md -> THREAT_MODEL.md ...................................................................... Patch Set 2: Thanks Alexey and Marton for the review. Patch set 2 addresses the feedback. On ownership: the ASF Security team keeps this change through pre-flight; the Kudu PMC owns the model once it merges. Responses to the four comments: - Lines 42 / 77 (REST API): added. The master embedded-webserver REST API (--enable_rest_api, off by default, can perform DDL on tables) is now listed as a surface in the section 1 narrative, the component-family table, the section 5a knobs table, and the section 6 per-surface table, behind the same authn/authz gate as RPC DDL. - Line 176 (DoS/DDoS): scoped out for this v0 model -- availability is not a property section 8 commits to. Now stated explicitly in section 3 and section 7; pre-authentication resource exhaustion remains an open item in section 8.8. - Line 277 (loopback RPC): added. Section 11 now flags assuming loopback (same-host) RPC is encrypted under --rpc_encryption=required (it is not by default; encrypting loopback needs --rpc_encrypt_loopback_connections), and section 10 notes the flag for operators. Section 9 already disclaimed loopback plaintext. Please take another look when you have a moment. -- To view, visit http://gerrit.cloudera.org:8080/24413 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: comment Gerrit-Change-Id: I41a29e63e09430abc8812ca4edc2e8665d19ab6b Gerrit-Change-Number: 24413 Gerrit-PatchSet: 2 Gerrit-Owner: Anonymous Coward <[email protected]> Gerrit-Reviewer: Alexey Serbin <[email protected]> Gerrit-Reviewer: Anonymous Coward <[email protected]> Gerrit-Reviewer: Kudu Jenkins (120) Gerrit-Reviewer: Marton Greber <[email protected]> Gerrit-Comment-Date: Mon, 15 Jun 2026 08:06:29 +0000 Gerrit-HasComments: No
