[
https://issues.apache.org/jira/browse/ACCUMULO-3939?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
James Mello updated ACCUMULO-3939:
----------------------------------
Description:
While reading the source I found out that the AuditedSecurityOperation is never
initialized properly.
The AuditSecurityOperation does not contain a getInstance() static method. This
in turn just calls the SecurityOperation getInstance() method. Because this is
called in a static manner the getInstance(String instanceId, boolean
initialize) is called against the SecurityOperation class not the
AuditedSecurityOperation class.
This should just be a simple fix that adds the getInstance() method to the
AuditedSecurityOperation class.
This is critical as we are in need of this security auditing to meet
Information Assurance requirements for an upcoming major release of our
software.
was:
While reading the source I found out that the AuditedSecurityOperation is never
initialized properly.
The AuditSecurityOperation does not contain a getInstance() static method. This
in turn just calls the SecurityOperation getInstance() method. Because this is
called in a static manner the getInstance(String instanceId, boolean
initialize) is called against the SecurityOperation class not the
AuditedSecurityOperation class.
This should just be a simple fix that adds the getInstance() method to the
AuditedSecurityOperation class.
This is critical as we are in need of this security auditing to meet
Information Assurance requirements for a major DoD release of software.
> Accumulo AuditedSecurityOperation is not initialized properly
> -------------------------------------------------------------
>
> Key: ACCUMULO-3939
> URL: https://issues.apache.org/jira/browse/ACCUMULO-3939
> Project: Accumulo
> Issue Type: Bug
> Affects Versions: 1.5.3
> Reporter: James Mello
> Priority: Critical
> Labels: easyfix
>
> While reading the source I found out that the AuditedSecurityOperation is
> never initialized properly.
> The AuditSecurityOperation does not contain a getInstance() static method.
> This in turn just calls the SecurityOperation getInstance() method. Because
> this is called in a static manner the getInstance(String instanceId, boolean
> initialize) is called against the SecurityOperation class not the
> AuditedSecurityOperation class.
> This should just be a simple fix that adds the getInstance() method to the
> AuditedSecurityOperation class.
> This is critical as we are in need of this security auditing to meet
> Information Assurance requirements for an upcoming major release of our
> software.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
