accumulo-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "James Mello (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (ACCUMULO-3939) Accumulo AuditedSecurityOperation is not initialized properly
Date Mon, 20 Jul 2015 20:19:05 GMT

     [ https://issues.apache.org/jira/browse/ACCUMULO-3939?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

James Mello updated ACCUMULO-3939:
----------------------------------
    Description: 
While reading the source I found out that the AuditedSecurityOperation is never initialized
properly.

The AuditSecurityOperation does not contain a getInstance() static method. This in turn just
calls the SecurityOperation getInstance() method. Because this is called in a static manner
the getInstance(String instanceId, boolean initialize) is called against the SecurityOperation
class not the AuditedSecurityOperation class.

This should just be a simple fix that adds the getInstance() method to the AuditedSecurityOperation
class.

This is critical as we are in need of this security auditing to meet Information Assurance
requirements for an upcoming major release of our software.

  was:
While reading the source I found out that the AuditedSecurityOperation is never initialized
properly.

The AuditSecurityOperation does not contain a getInstance() static method. This in turn just
calls the SecurityOperation getInstance() method. Because this is called in a static manner
the getInstance(String instanceId, boolean initialize) is called against the SecurityOperation
class not the AuditedSecurityOperation class.

This should just be a simple fix that adds the getInstance() method to the AuditedSecurityOperation
class.

This is critical as we are in need of this security auditing to meet Information Assurance
requirements for a major DoD release of software.


> Accumulo AuditedSecurityOperation is not initialized properly
> -------------------------------------------------------------
>
>                 Key: ACCUMULO-3939
>                 URL: https://issues.apache.org/jira/browse/ACCUMULO-3939
>             Project: Accumulo
>          Issue Type: Bug
>    Affects Versions: 1.5.3
>            Reporter: James Mello
>            Priority: Critical
>              Labels: easyfix
>
> While reading the source I found out that the AuditedSecurityOperation is never initialized
properly.
> The AuditSecurityOperation does not contain a getInstance() static method. This in turn
just calls the SecurityOperation getInstance() method. Because this is called in a static
manner the getInstance(String instanceId, boolean initialize) is called against the SecurityOperation
class not the AuditedSecurityOperation class.
> This should just be a simple fix that adds the getInstance() method to the AuditedSecurityOperation
class.
> This is critical as we are in need of this security auditing to meet Information Assurance
requirements for an upcoming major release of our software.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message