Re: Security labels

2016-02-12 Thread oleg yusim
Jack, I updated my document with all the security gaps I was able to find and posted it there: https://docs.google.com/document/d/13-yu-1a0MMkBiJFPNkYoTd1Hzed9tgKltWi6hFLZbsk/edit?usp=sharing Thanks, Oleg On Thu, Feb 11, 2016 at 4:09 PM, oleg yusim wrote: > Jack, > > I asked my management, if

Re: Security labels

2016-02-11 Thread oleg yusim
Jack, I asked my management, if I can share with community my assessment spreadsheet (whole thing, with gaps and desired configurations). Let's wait for their answer. I would definitely update the document I shared with the rest of gaps, so you, guys, would have it for sure. Now, in case if my ma

Re: Security labels

2016-02-11 Thread Jack Krupansky
Thanks for putting the items together in a list. This allows people to see things with more context. Give people in the user community a little time to respond. A week, maybe. Hopefully some of the senior Cassandra committers will take a look as well. Will the final assessment become a public docu

Re: Security labels

2016-02-11 Thread oleg yusim
Thanks Dani. Oleg On Thu, Feb 11, 2016 at 2:27 PM, Dani Traphagen wrote: > Hi Oleg, > > I'm happy to take a look. Will update after review. > > Thanks, > Dani > > On Thu, Feb 11, 2016 at 12:23 PM, oleg yusim wrote: > >> Hi Dani, >> >> As promised, I sort of put all my questions under the "one

Re: Security labels

2016-02-11 Thread Dani Traphagen
Hi Oleg, I'm happy to take a look. Will update after review. Thanks, Dani On Thu, Feb 11, 2016 at 12:23 PM, oleg yusim wrote: > Hi Dani, > > As promised, I sort of put all my questions under the "one roof". I would > really appreciate you opinion on them. > > https://drive.google.com/open?id=0

Re: Security labels

2016-02-11 Thread oleg yusim
Hi Dani, As promised, I sort of put all my questions under the "one roof". I would really appreciate you opinion on them. https://drive.google.com/open?id=0B2L9nW4Cyj41YWd1UkI4ZXVPYmM Thanks, Oleg On Fri, Jan 29, 2016 at 3:28 PM, Dani Traphagen wrote: > ​Hi Oleg, > > Thanks that helped clear

Re: Security labels

2016-01-29 Thread oleg yusim
Thanks Dani! Oleg On Fri, Jan 29, 2016 at 3:28 PM, Dani Traphagen wrote: > ​Hi Oleg, > > Thanks that helped clear things up! This sounds like a daunting task. I > wish you all the best with it. > > Cheers, > Dani​ > > On Fri, Jan 29, 2016 at 10:03 AM, oleg yusim wrote: > >> Dani, >> >> I reall

Re: Security labels

2016-01-29 Thread Dani Traphagen
​Hi Oleg, Thanks that helped clear things up! This sounds like a daunting task. I wish you all the best with it. Cheers, Dani​ On Fri, Jan 29, 2016 at 10:03 AM, oleg yusim wrote: > Dani, > > I really appreciate you response. Actually, session timeouts and security > labels are two different to

Re: Security labels

2016-01-29 Thread oleg yusim
Dani, I really appreciate you response. Actually, session timeouts and security labels are two different topics (first is about attack when somebody opened, say, ssh window to DB, left his machine unattended and somebody else stole his session, second - to enable DB to support what called MAC acce

Re: Security labels

2016-01-29 Thread Dani Traphagen
Also -- it looks like you're really asking questions about session timeouts and security labels as they associate, would be more helpful to keep in one thread. :) On Friday, January 29, 2016, Dani Traphagen wrote: > Hi Oleg, > > I understand your frustration but unfortunately, in the terms of yo

Re: Security labels

2016-01-29 Thread oleg yusim
Jack, Thanks for your suggestion. I'm familiar with Cassandra documentation, and I'm aware of differences between DSE and Cassandra. Questions I ask here are those, I found no mention about in documentation. Let's take security labels for instance. Cassandra documentation is completely silent on

Re: Security labels

2016-01-29 Thread Jack Krupansky
To answer any future questions along these same lines, I suggest that you start by simply searching the doc and search the github repo for the source code for the relevant keywords. That will give you the definitive answers quickly. If something is missing, feel free to propose that it be added (if

Re: Security labels

2016-01-28 Thread oleg yusim
Patrick, Absolutely. Security label is mechanism of access control, utilized by MAC (mandatory access control) model, and not utilized by DAC (discretionary access control) model, we all are used to. In database content it is illustrated for instance here: http://www.postgresql.org/docs/current/st

Re: Security labels

2016-01-28 Thread Patrick McFadin
Cassandra has support for authentication security, but I'm not familiar with a security label. Can you describe what you want to do? Patrick On Thu, Jan 28, 2016 at 2:26 PM, oleg yusim wrote: > Greetings, > > Does Cassandra support security label concept? If so, where can I read on > how it sho