Browse Source

ZOOKEEPER-1917 Apache Zookeeper logs cleartext admin passwords (fpj via michim)

git-svn-id: https://svn.apache.org/repos/asf/zookeeper/trunk@1628123 13f79535-47bb-0310-9956-ffa450edef68
Michi Mutsuzaki 10 years ago
parent
commit
b8ad636c14
2 changed files with 9 additions and 0 deletions
  1. 2 0
      CHANGES.txt
  2. 7 0
      src/docs/src/documentation/content/xdocs/zookeeperAdmin.xml

+ 2 - 0
CHANGES.txt

@@ -18,6 +18,8 @@ IMPROVEMENTS:
 
   ZOOKEEPER-2039 Jute compareBytes incorrect comparison index (Ian Dimayuga via fpj) 
 
+  ZOOKEEPER-1917 Apache Zookeeper logs cleartext admin passwords (fpj via michim)
+
 Release 3.5.0 - 8/4/2014
 
 NEW FEATURES:

+ 7 - 0
src/docs/src/documentation/content/xdocs/zookeeperAdmin.xml

@@ -1677,6 +1677,13 @@ server.3=zoo3:2888:3888</programlisting>
         and maintenance of ZooKeeper storage.
         </para>
       </section>
+      <note>
+      <para>The data stored in these files is not encrypted. In the case of
+      storing sensitive data in ZooKeeper (which is fairly uncommon), necessary
+      measures need to be taken to prevent unauthorized access. Such measures
+      are external to ZooKeeper (e.g., control access to the files) and
+      depend on the individual settings in which it is being deployed. </para>
+      </note>
     </section>
 
     <section id="sc_commonProblems">