cassandra-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Eric Evans (JIRA)" <j...@apache.org>
Subject [jira] Commented: (CASSANDRA-1004) Debian packaging should allow a specific user name and optionally create it as "cassandra" on install
Date Tue, 15 Jun 2010 16:43:23 GMT

    [ https://issues.apache.org/jira/browse/CASSANDRA-1004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12879021#action_12879021
] 

Eric Evans commented on CASSANDRA-1004:
---------------------------------------

Jonathan Ellis:
bq. CASSANDRA-1181 (which may or may not amount to anything) would require running Cassandra
as root, fwiw

This _should_ be OK. My understanding of how jsvc drops privileges,  is that it occurs _after_
the JVM has been initialized, and after the apps init() has been called (so that you can bind
to ports < 1024 for example).

http://commons.apache.org/daemon/jsvc.html

Ted Zlatanov:
bq. the user name should be specified in one place, not hard-coded as "cassandra". That way
sites with real users named "cassandra" don't suffer and the sysadmin can choose to use "root"
if appropriate

The point here is integration with Debian systems, and installing a service that should drop
privileges at startup is something that results in the creation of a system user on Debian
systems. If you don't want to run Cassandra as this user, you can always hack the init script
(it is a conf file; changes will be preserved across upgrades).

> Debian packaging should allow a specific user name and optionally create it as "cassandra"
on install
> -----------------------------------------------------------------------------------------------------
>
>                 Key: CASSANDRA-1004
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-1004
>             Project: Cassandra
>          Issue Type: New Feature
>            Reporter: Ted Zlatanov
>         Attachments: cassandra-user.patch
>
>


-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message