Security Manager
Data Collector includes a Java Security Manager that is enabled by default. For enhanced security, you can enable the Data Collector Security Manager which prevents stages from accessing files in protected Data Collector directories.
- Java Security Manager
-
By default, Data Collector uses the Java Security Manager. The Java Security Manager restricts the runtime permissions of user libraries. This allows administrators to control user libraries actions on production systems. For example, by default, user libraries cannot call out to network resources and potentially cause denial-of-service (DDoS) attacks.
The security policy is defined in the
$SDC_CONF/sdc-security.policy
fileSecurity Policy configuration properties of the deployment. The file syntax is java standard. - Data Collector Security Manager
- For enhanced security, enable the Data Collector Security Manager. The Data Collector Security Manager prevents stages from accessing files in protected Data Collector
directories, regardless of how you define the
$SDC_CONF/sdc-security.policy
fileSecurity Policy configuration properties of the deployment.
If needed, you can configure Data Collector to use neither security manager by setting the SDC_SECURITY_MANAGER_ENABLED environment variable to false.
Modify environment variablesModify environment variables using the method required by your installation type.