forked from docs/doc-exports
Yang, Tong
2195db241c
Reviewed-by: Pruthi, Vineet <vineet.pruthi@t-systems.com> Reviewed-by: Rechenburg, Matthias <matthias.rechenburg@t-systems.com> Co-authored-by: Yang, Tong <yangtong2@huawei.com> Co-committed-by: Yang, Tong <yangtong2@huawei.com>
20 lines
2.4 KiB
HTML
20 lines
2.4 KiB
HTML
<a name="admin_guide_000315"></a><a name="admin_guide_000315"></a>
|
|
|
|
<h1 class="topictitle1">Security Statement</h1>
|
|
<div id="body1586337392077"><div class="section" id="admin_guide_000315__section1653514312162"><h4 class="sectiontitle">JDK Usage Statement</h4><p id="admin_guide_000315__p166511658346"><span id="admin_guide_000315__text14851023151712">MRS</span> MRS cluster is a big data cluster that provides users with distributed data analysis and computing capabilities. The built-in JDK of <span id="admin_guide_000315__text145356138248">MRS</span> MRS is OpenJDK, which is used in the following scenarios:</p>
|
|
<ul id="admin_guide_000315__ul51064717189"><li id="admin_guide_000315__li141069716189">Platform service running and maintenance</li><li id="admin_guide_000315__li71062075182">Linux client operations, including service submission and application O&M</li></ul>
|
|
</div>
|
|
<div class="section" id="admin_guide_000315__section4316135115416"><h4 class="sectiontitle">JDK Risk Description</h4><p id="admin_guide_000315__p1231611514415">The system performs permission control on the built-in JDK. Only users in the related group of the <span id="admin_guide_000315__text67509419010">MRS</span> platform can access the JDK. In addition, the platform is deployed on a customer's intranet. Therefore, the security risk is low.</p>
|
|
</div>
|
|
<div class="section" id="admin_guide_000315__section419118126519"><h4 class="sectiontitle">JDK Hardening</h4><p id="admin_guide_000315__p141913122055">For details about how to harden the JDK, see "Hardening JDK" in <a href="admin_guide_000272.html">Hardening Policies</a>.</p>
|
|
</div>
|
|
<div class="section" id="admin_guide_000315__section19183846581"><h4 class="sectiontitle">Public IP Addresses in Hue</h4><p id="admin_guide_000315__p171831442581">Hue uses the test cases of third-party packages, such as <strong id="admin_guide_000315__b1461980363112347">ipadrress</strong>, <strong id="admin_guide_000315__b577821303112347">requests</strong>, and <strong id="admin_guide_000315__b145922709112347">Django</strong>, and uses the public IP addresses in the comments of the test cases. However, these public IP addresses are not involved when Hue provides services, and the Hue configuration file does not involve these public IP addresses.</p>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="admin_guide_000233.html">Security Management</a></div>
|
|
</div>
|
|
</div>
|
|
|