Return-Path: X-Original-To: apmail-cassandra-user-archive@www.apache.org Delivered-To: apmail-cassandra-user-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 49A6D9DA7 for ; Tue, 1 May 2012 01:45:46 +0000 (UTC) Received: (qmail 4640 invoked by uid 500); 1 May 2012 01:45:44 -0000 Delivered-To: apmail-cassandra-user-archive@cassandra.apache.org Received: (qmail 4602 invoked by uid 500); 1 May 2012 01:45:44 -0000 Mailing-List: contact user-help@cassandra.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@cassandra.apache.org Delivered-To: mailing list user@cassandra.apache.org Received: (qmail 4594 invoked by uid 99); 1 May 2012 01:45:44 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 01 May 2012 01:45:44 +0000 X-ASF-Spam-Status: No, hits=2.2 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: local policy) Received: from [208.113.200.5] (HELO homiemail-a54.g.dreamhost.com) (208.113.200.5) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 01 May 2012 01:45:36 +0000 Received: from homiemail-a54.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a54.g.dreamhost.com (Postfix) with ESMTP id F1E723A4061 for ; Mon, 30 Apr 2012 18:45:13 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; c=nofws; d=thelastpickle.com; h=from :mime-version:content-type:subject:date:in-reply-to:to :references:message-id; q=dns; s=thelastpickle.com; b=bpUBlZibMr SUtks1XYps/lf+4tPzKpl6WTZdvP7O7CSOdT6pnIkZKjEPMmkp4Iht+pOmp3VdCU h5fWKpCqA3pjrYr/QSfg9kb4hVtE3icajkJ2VOl/rFrGAft3pVxMAfLzkHuKq1Nh +6z4KWvqoWM7ljABNtEV+xymm44N4lH6Q= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=thelastpickle.com; h=from :mime-version:content-type:subject:date:in-reply-to:to :references:message-id; s=thelastpickle.com; bh=MTJyKrtF155hOkSJ ESsG1+VKUoU=; b=eTESq1BRvgioquuDMXkWq7/Gh+N4DVTWTrCt+qSfQLVWju3g e9tFJcjjCDTXm2w3VFQ2ZjvjxLZGoCazIwBiF+cp35X1sUTC64HpKdk82FLg7YcG YxMUYoyBMgUV8Xh3Nq5CxHFSNV6XTQBZ3zBQHpbldlHeNqiY8ChsWJjpP+0= Received: from [192.168.2.189] (unknown [116.90.132.105]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: aaron@thelastpickle.com) by homiemail-a54.g.dreamhost.com (Postfix) with ESMTPSA id 7F6043A4058 for ; Mon, 30 Apr 2012 18:45:13 -0700 (PDT) From: aaron morton Mime-Version: 1.0 (Apple Message framework v1257) Content-Type: multipart/alternative; boundary="Apple-Mail=_ECB91931-6DD5-41A2-9356-809059C9E616" Subject: Re: JNA + Cassandra security Date: Tue, 1 May 2012 13:45:11 +1200 In-Reply-To: To: user@cassandra.apache.org References: Message-Id: <581D3529-B1D1-4ED9-97CD-13AFC328CE08@thelastpickle.com> X-Mailer: Apple Mail (2.1257) --Apple-Mail=_ECB91931-6DD5-41A2-9356-809059C9E616 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii > If you've disabled swap on a machine what is the reason to use JNA? JNA will still be used to efficiently make hard links for snapshots. = It's not necessary to lock the JVM memory when swap is disabled.=20 > A second question is doesn't JNA break the Java inherent security = mechanisms by allowing access to direct system calls outside of the JVM? = Are there any concerns around this? Anyone else have an answer?=20 Cheers ----------------- Aaron Morton Freelance Developer @aaronmorton http://www.thelastpickle.com On 1/05/2012, at 12:49 PM, Cord MacLeod wrote: > Hello group, >=20 > I'm a new Cassandra and Java user so I'm still trying to get my head = around a few things. If you've disabled swap on a machine what is the = reason to use JNA? A second question is doesn't JNA break the Java = inherent security mechanisms by allowing access to direct system calls = outside of the JVM? Are there any concerns around this? --Apple-Mail=_ECB91931-6DD5-41A2-9356-809059C9E616 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii
If you've disabled swap on a machine = what is the reason to use JNA?
JNA will still be used = to efficiently make hard links for snapshots. It's not necessary to lock = the JVM memory when swap is = disabled. 

A = second question is doesn't JNA break the Java inherent security = mechanisms by allowing access to direct system calls outside of the JVM? =  Are there any concerns around = this?

Anyone else have an = answer? 

Cheers

http://www.thelastpickle.com

On 1/05/2012, at 12:49 PM, Cord MacLeod wrote:

Hello = group,

I'm a new Cassandra and Java user so I'm still trying to = get my head around a few things.  If you've disabled swap on a = machine what is the reason to use JNA?  A second question is = doesn't JNA break the Java inherent security mechanisms by allowing = access to direct system calls outside of the JVM?  Are there any = concerns around this?

= --Apple-Mail=_ECB91931-6DD5-41A2-9356-809059C9E616--