hadoop-mapreduce-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Todd Lipcon (JIRA)" <j...@apache.org>
Subject [jira] Updated: (MAPREDUCE-2178) Race condition in LinuxTaskController permissions handling
Date Wed, 16 Feb 2011 19:15:25 GMT

     [ https://issues.apache.org/jira/browse/MAPREDUCE-2178?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Todd Lipcon updated MAPREDUCE-2178:
-----------------------------------

    Attachment: mr-2178-error-on-launch-fail.txt

Another fix based on branch 20 patch - if the taskjvm.sh fails to write, it currently swallows
that exception without printing it to logs or anything.

Ideally it would become part of the diagnostic info for the task, but this small patch is
a big improvement for diagnosability.

> Race condition in LinuxTaskController permissions handling
> ----------------------------------------------------------
>
>                 Key: MAPREDUCE-2178
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-2178
>             Project: Hadoop Map/Reduce
>          Issue Type: Bug
>          Components: security, task-controller
>    Affects Versions: 0.22.0
>            Reporter: Todd Lipcon
>            Priority: Blocker
>             Fix For: 0.22.0
>
>         Attachments: 0001-Amend-MAPREDUCE-2178.-Fix-racy-check-for-config-file.patch,
0002-Amend-MAPREDUCE-2178.-Check-argc-after-checks-for-pe.patch, 0003-Amend-MAPREDUCE-2178.-Check-result-of-chdir.patch,
ac-sys-largefile.patch, mr-2178-error-on-launch-fail.txt, mr-2178-y20-sortof.patch
>
>
> The linux-task-controller executable currently traverses a directory heirarchy and calls
chown/chmod on the files inside. There is a race condition here which can be exploited by
an attacker, causing the task-controller to improprly chown an arbitrary target file (via
a symlink) to the user running a MR job. This can be exploited to escalate to root.
> [this issue was raised and discussed on the security@ list over the last couple of months]

-- 
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Mime
View raw message