Return-Path: X-Original-To: apmail-hive-issues-archive@minotaur.apache.org Delivered-To: apmail-hive-issues-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 33A6C1878E for ; Tue, 19 Jan 2016 20:44:40 +0000 (UTC) Received: (qmail 99023 invoked by uid 500); 19 Jan 2016 20:44:40 -0000 Delivered-To: apmail-hive-issues-archive@hive.apache.org Received: (qmail 98973 invoked by uid 500); 19 Jan 2016 20:44:40 -0000 Mailing-List: contact issues-help@hive.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@hive.apache.org Delivered-To: mailing list issues@hive.apache.org Received: (qmail 98951 invoked by uid 99); 19 Jan 2016 20:44:40 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 19 Jan 2016 20:44:40 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id C34202C0453 for ; Tue, 19 Jan 2016 20:44:39 +0000 (UTC) Date: Tue, 19 Jan 2016 20:44:39 +0000 (UTC) From: "Sergey Shelukhin (JIRA)" To: issues@hive.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (HIVE-12855) LLAP: add checks when resolving UDFs to enforce whitelist MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HIVE-12855?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Sergey Shelukhin updated HIVE-12855: ------------------------------------ Attachment: HIVE-12855.01.patch > LLAP: add checks when resolving UDFs to enforce whitelist > --------------------------------------------------------- > > Key: HIVE-12855 > URL: https://issues.apache.org/jira/browse/HIVE-12855 > Project: Hive > Issue Type: Sub-task > Reporter: Sergey Shelukhin > Assignee: Sergey Shelukhin > Attachments: HIVE-12855.01.patch, HIVE-12855.part.patch > > > Currently, adding a temporary UDF and calling LLAP with it (bypassing the LlapDecider check, I did it by just modifying the source) only fails because the class could not be found. If the UDF was accessible to LLAP, it would execute. Inside the daemon, UDF instantiation should fail for custom UDFs (and only succeed for whitelisted custom UDFs, once that is implemented). -- This message was sent by Atlassian JIRA (v6.3.4#6332)