ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Onischuk (JIRA)" <j...@apache.org>
Subject [jira] [Resolved] (AMBARI-11307) Non-secure clusters should not install the linux task controller
Date Thu, 21 May 2015 16:54:17 GMT

     [ https://issues.apache.org/jira/browse/AMBARI-11307?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Andrew Onischuk resolved AMBARI-11307.
--------------------------------------
    Resolution: Fixed

Committed to trunk

> Non-secure clusters should not install the linux task controller
> ----------------------------------------------------------------
>
>                 Key: AMBARI-11307
>                 URL: https://issues.apache.org/jira/browse/AMBARI-11307
>             Project: Ambari
>          Issue Type: Bug
>            Reporter: Andrew Onischuk
>            Assignee: Andrew Onischuk
>             Fix For: 2.1.0
>
>
> In insecure clusters, all user code runs as mapred. With our default insecure
> install, the setuid to root linux task controller provides mapred with the
> ability to run processes as any user. The combination of these is bad. I think
> we should separate out the setuid executable to a separate rpm that is only
> installed on secure clusters.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message