Mailing-List: contact user-help@cassandra.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@cassandra.apache.org
MIME-Version: 1.0
In-Reply-To: 
 <CAGY8e-7jo2MBKrjGMBPw1fTHyae-V=4Ox=JbW3oh52WFQD_rdA@mail.gmail.com>
References: 
 <CAKd4e_Eh7NOBQxrRoe0xBFjCFFa=aNqK=w0+OABJ-H1bGYOOxA@mail.gmail.com>
	<CAGY8e-7jo2MBKrjGMBPw1fTHyae-V=4Ox=JbW3oh52WFQD_rdA@mail.gmail.com>
Date: Thu, 28 Jan 2016 19:37:21 -0600
Message-ID: 
 <CAKd4e_FynYNB9AiJPRTN5GUj8drBZ4j6TwVYDr4tFWD0FxH_sw@mail.gmail.com>
Subject: Re: Security labels
From: oleg yusim <olegyusim@gmail.com>
To: user@cassandra.apache.org
Content-Type: multipart/alternative; boundary=001a1141f0c68e2bd8052a6f13e6

--001a1141f0c68e2bd8052a6f13e6
Content-Type: text/plain; charset=UTF-8

Patrick,

Absolutely. Security label is mechanism of access control, utilized by MAC
(mandatory access control) model, and not utilized by DAC (discretionary
access control) model, we all are used to. In database content it is
illustrated for instance here:
http://www.postgresql.org/docs/current/static/sql-security-label.html

Now, as per my goals, I'm making a security assessment for Cassandra DB
with a goal to produce STIG on this product. That is one of the parameters
in database SRG I have to assess against.

Thanks,

Oleg


On Thu, Jan 28, 2016 at 6:32 PM, Patrick McFadin <pmcfadin@gmail.com> wrote:

> Cassandra has support for authentication security, but I'm not familiar
> with a security label. Can you describe what you want to do?
>
> Patrick
>
> On Thu, Jan 28, 2016 at 2:26 PM, oleg yusim <olegyusim@gmail.com> wrote:
>
>> Greetings,
>>
>> Does Cassandra support security label concept? If so, where can I read on
>> how it should be applied?
>>
>> Thanks,
>>
>> Oleg
>>
>
>

--001a1141f0c68e2bd8052a6f13e6
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Patrick,<div><br></div><div>Absolutely. Security label is =
mechanism of access control, utilized by MAC (mandatory access control) mod=
el, and not utilized by DAC (discretionary access control) model, we all ar=
e used to. In database content it is illustrated for instance here:=C2=A0<a=
 href=3D"http://www.postgresql.org/docs/current/static/sql-security-label.h=
tml">http://www.postgresql.org/docs/current/static/sql-security-label.html<=
/a></div><div><br></div><div>Now, as per my goals, I&#39;m making a securit=
y assessment for Cassandra DB with a goal to produce STIG on this product. =
That is one of the parameters in database SRG I have to assess against.</di=
v><div><br></div><div>Thanks,</div><div><br></div><div>Oleg</div><div><br><=
/div></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On Thu=
, Jan 28, 2016 at 6:32 PM, Patrick McFadin <span dir=3D"ltr">&lt;<a href=3D=
"mailto:pmcfadin@gmail.com" target=3D"_blank">pmcfadin@gmail.com</a>&gt;</s=
pan> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex=
;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr">Cassandra ha=
s support for authentication security, but I&#39;m not familiar with a secu=
rity label. Can you describe what you want to do?<span class=3D"HOEnZb"><fo=
nt color=3D"#888888"><div><br></div><div>Patrick</div></font></span></div><=
div class=3D"HOEnZb"><div class=3D"h5"><div class=3D"gmail_extra"><br><div =
class=3D"gmail_quote">On Thu, Jan 28, 2016 at 2:26 PM, oleg yusim <span dir=
=3D"ltr">&lt;<a href=3D"mailto:olegyusim@gmail.com" target=3D"_blank">olegy=
usim@gmail.com</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" s=
tyle=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div=
 dir=3D"ltr">Greetings,<div><br></div><div>Does Cassandra support security =
label concept? If so, where can I read on how it should be applied?</div><d=
iv><br></div><div>Thanks,</div><div><br></div><div>Oleg</div></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div>

--001a1141f0c68e2bd8052a6f13e6--