ASF GitHub Bot updated STORM-2960:
    Labels: pull-request-available  (was: )

> Better to stress importance of setting up proper OS account for Storm 
> processes
> -------------------------------------------------------------------------------
>                 Key: STORM-2960
>                 URL: https://issues.apache.org/jira/browse/STORM-2960
>             Project: Apache Storm
>          Issue Type: Documentation
>          Components: documentation
>            Reporter: Jungtaek Lim
>            Assignee: Jungtaek Lim
>            Priority: Major
>              Labels: pull-request-available
> We have SECURITY.md and also "Firewall/OS level Security" section, but the 
> document doesn't explicitly mention the fact that Storm processes should use 
> OS account(s) which should be properly restricted. We may also want to note 
> that workers which could execute arbitrary code will be running with 
> Supervisor OS account by default.

This message was sent by Atlassian JIRA

Reply via email to