CODEWITHSUNDEEP
cassandra
Hemant Sambha
Hemant Sambha

Reputation: 23

User Defined Functions Security Risk

I read that if I set my enable_user_defined_functions true in the cassandra.yaml then the User defined functions (UDFs) present a security risk, since they are executed on the server side. In Cassandra 3.0 and later, UDFs are executed in a sandbox to contain the execution of malicious code. They are disabled by default. My question is are they executed in the sandbox after I set enable_user_defined_functions true?

Upvotes: 1

Views: 181

Answers (1)

Chris Lohfink
Chris Lohfink

Reputation: 16410

Unless you explicitly set enable_user_defined_functions_threads to false (which you really shouldn't do) the UDFs will be run asynchronously to a pool locked down with limited security manager and special class loader.

You should still only allow trusted sources for your UDF code though incase there are security bugs.

Upvotes: 1

Related Questions