[STORM-2960] Better to stress importance of setting up proper OS account for Storm processes

• Type: Documentation
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0, 1.1.3, 1.2.2
• Component/s: documentation
• Labels: pull-request-available
• Assignee: Jungtaek Lim
• Reporter: Jungtaek Lim
• Created: 19/Feb/18 11:25
• Updated: 21/Feb/18 04:48
• Resolved: 21/Feb/18 04:48

Description

We have SECURITY.md and also "Firewall/OS level Security" section, but the document doesn't explicitly mention the fact that Storm processes should use OS account(s) which should be properly restricted. We may also want to note that workers which could execute arbitrary code will be running with Supervisor OS account by default.

Issue Links

• links to: GitHub Pull Request #2562