[ 
https://issues.apache.org/jira/browse/METRON-571?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Tyler Moore updated METRON-571:
-------------------------------
    Attachment: ExternalFunctionsTest.java
                ExternalFunctions.java

This is what I have together so far on this. 
Not sure what needs passed in from the json object or how y'all are handling 
the errors in storm (just loogging them?) but for now I just have them printing 
to console and any errors from subprocess should be logged to a file in /errors 
directory. 

Need some help on the unit testing as i don't have experience with junit, but I 
put what I could together from what I could gather on casey's tutorial.

The process loader runs 4 trypes of functions; bash shell scripts, bourne shell 
scripts, python scripts, and any java functions you want to pass in.
There is a lot of error catching already and the user would have to havce 
access to the system the load the funtions (they are loaded from /scripts dir 
on the host) and whitelisting is implemented and type-checking as well.

Further security enhance,ents could be dropping priveledges with a security 
manager.

Also, i'm not sure if we will need the threaded handler class, but it may be 
needed when running a script that needs multi-threading capabilities or creates 
its own subprocesses.

> Add stellar keywords for executing local commands
> -------------------------------------------------
>
>                 Key: METRON-571
>                 URL: https://issues.apache.org/jira/browse/METRON-571
>             Project: Metron
>          Issue Type: Improvement
>            Reporter: Jon Zeolla
>            Priority: Minor
>         Attachments: ExternalFunctions.java, ExternalFunctionsTest.java
>
>
> Stellar should have the ability to execute scripts on a server in order to 
> undertake automated mitigation or alerting.  Perhaps SHELL_EXEC?



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to