From 61bea5a0d944ef446c0187796db7b33f0d872da5 Mon Sep 17 00:00:00 2001 From: Jonathan Ellis Date: Wed, 27 May 2015 17:02:01 -0500 Subject: [PATCH] Explain that UDF security manager will be coming in 3.0 --- NEWS.txt | 11 ++++++++--- conf/cassandra.yaml | 6 ++++-- 2 files changed, 12 insertions(+), 5 deletions(-) diff --git a/NEWS.txt b/NEWS.txt index 98f0499012..cc80cc1f90 100644 --- a/NEWS.txt +++ b/NEWS.txt @@ -53,9 +53,14 @@ New features been added to CQL. ************************************************************************ IMPORTANT NOTE: user-defined functions can be used to execute - arbitrary and possibly evil code in Cassandra 2.2-beta1. - To enable UDFs edit cassandra.yaml and set enable_user_defined_functions - to true. CASSANDRA-9402 will add a security manager for UDFs. + arbitrary and possibly evil code in Cassandra 2.2, and are + therefore disabled by default. To enable UDFs edit + cassandra.yaml and set enable_user_defined_functions to true. + + CASSANDRA-9402 will add a security manager for UDFs in Cassandra + 3.0. This will inherently be backwards-incompatible with any 2.2 + UDF that perform insecure operations such as opening a socket or + writing to the filesystem. ************************************************************************ - Row-cache is now fully off-heap. - jemalloc is now automatically preloaded and used on Linux and OS-X if diff --git a/conf/cassandra.yaml b/conf/cassandra.yaml index fb103fab98..04a78bd3cd 100644 --- a/conf/cassandra.yaml +++ b/conf/cassandra.yaml @@ -845,6 +845,8 @@ tracetype_query_ttl: 86400 tracetype_repair_ttl: 604800 # UDFs (user defined functions) are disabled by default. -# As of Cassandra 2.2-beta1, there is no security manager or anything else in place that -# prevents execution of evil code. CASSANDRA-9402 will fix this issue for Cassandra 2.2-rc1. +# As of Cassandra 2.2, there is no security manager or anything else in place that +# prevents execution of evil code. CASSANDRA-9402 will fix this issue for Cassandra 3.0. +# This will inherently be backwards-incompatible with any 2.2 UDF that perform insecure +# operations such as opening a socket or writing to the filesystem. enable_user_defined_functions: false