hive-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sergey Shelukhin (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (HIVE-12855) LLAP: add checks when resolving UDFs to enforce whitelist
Date Wed, 13 Jan 2016 01:49:39 GMT

     [ https://issues.apache.org/jira/browse/HIVE-12855?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Sergey Shelukhin updated HIVE-12855:
------------------------------------
    Description: Currently, adding a temporary UDF and calling LLAP with it (bypassing the
LlapDecider check, I did it by just modifying the source) only fails because the class could
not be found. If the UDF was accessible to LLAP, it would execute. Inside the daemon, UDF
instantiation should fail for custom UDFs (and only succeed for whitelisted custom UDFs, once
that is implemented).  (was: Currently, adding a temporary UDF and calling LLAP with it (bypassing
the LlapDecider check, I did it by just modifying the source) only fails because the class
could not be found. If the UDF was accessible to LLAP, it would execute.)

> LLAP: add checks when resolving UDFs to enforce whitelist
> ---------------------------------------------------------
>
>                 Key: HIVE-12855
>                 URL: https://issues.apache.org/jira/browse/HIVE-12855
>             Project: Hive
>          Issue Type: Sub-task
>            Reporter: Sergey Shelukhin
>
> Currently, adding a temporary UDF and calling LLAP with it (bypassing the LlapDecider
check, I did it by just modifying the source) only fails because the class could not be found.
If the UDF was accessible to LLAP, it would execute. Inside the daemon, UDF instantiation
should fail for custom UDFs (and only succeed for whitelisted custom UDFs, once that is implemented).



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message