Return-Path: Delivered-To: apmail-hadoop-general-archive@minotaur.apache.org Received: (qmail 95660 invoked from network); 25 Aug 2009 16:57:45 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 25 Aug 2009 16:57:45 -0000 Received: (qmail 39590 invoked by uid 500); 25 Aug 2009 16:58:10 -0000 Delivered-To: apmail-hadoop-general-archive@hadoop.apache.org Received: (qmail 39518 invoked by uid 500); 25 Aug 2009 16:58:10 -0000 Mailing-List: contact general-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: general@hadoop.apache.org Delivered-To: mailing list general@hadoop.apache.org Received: (qmail 39508 invoked by uid 99); 25 Aug 2009 16:58:10 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 25 Aug 2009 16:58:10 +0000 X-ASF-Spam-Status: No, hits=1.2 required=10.0 tests=SPF_NEUTRAL X-Spam-Check-By: apache.org Received-SPF: neutral (athena.apache.org: local policy) Received: from [209.85.219.209] (HELO mail-ew0-f209.google.com) (209.85.219.209) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 25 Aug 2009 16:58:02 +0000 Received: by ewy5 with SMTP id 5so2001141ewy.36 for ; Tue, 25 Aug 2009 09:57:40 -0700 (PDT) MIME-Version: 1.0 Received: by 10.216.72.85 with SMTP id s63mr1384107wed.0.1251219458194; Tue, 25 Aug 2009 09:57:38 -0700 (PDT) In-Reply-To: References: Date: Tue, 25 Aug 2009 17:57:38 +0100 Message-ID: Subject: Re: [VOTE] create security@hadoop.apache.org From: Tom White To: general@hadoop.apache.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org +1 Tom On Tue, Aug 25, 2009 at 4:42 PM, Owen O'Malley wrote: > With the upcoming freeze of Map/Reduce 0.21, for the first time, we have > code that is critical from a system security perspective. As outlined on > http://www.apache.org/security/committers.html this will be a private list > with only committers that are working on the security aspects of Hadoop. The > use of the list will be strictly limited to collecting security issues from > users so that they can fixed and released before they are announced on > public forums, such as jira. Clearly, I'm +1. > > On a related note, my plan is to work on getting full Kerberos integration > for 0.22. We've come a long way without any authentication in Hadoop, but it > is getting important to start closing the holes. > > -- Owen >