Ensure that Cassandra only listens for network connections on authorized interfaces
Details When listen_address is blank and listen_interface is commented out, this will be set automatically by InetAddress.getLocalHost(). Presuming the node...
- Home
- Security Hardening
- CIS Apache Cassandra 3.11 L2 Unix V1.0.0
CIS Apache Cassandra 3.11 L2 Unix V1.0.0
Ensure that logging is enabled. – logback.xml
Details Apache Cassandra uses Logback for logging functionality. While this can be set using nodetool setlogginglevel changes made using this...Ensure that logging is enabled. – nodetool getlogginglevels
Details Apache Cassandra uses Logback for logging functionality. While this can be set using nodetool setlogginglevel changes made using this...Ensure that the default password changed for the cassandra role
Details The cassandra role has a default password which must be changed. Rationale: Failure to change the default password for...Ensure the Cassandra service is run as a non-root user
Details Though Cassandra database may be run as root, it should run as another non-root user. Rationale: One of the...Ensure the latest version of Java is installed
Details A prerequisite to installing Cassandra is the installation of Java. The version of Java installed should be the most...Ensure the latest version of Python is installed
Details A prerequisite to installing Cassandra is the installation of Python. The version of Python installed should be the most...Inter-node Encryption
Details Cassandra offers the option to encrypt data in transit between nodes on the cluster. By default, inter-node encryption is...