sentry-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sravya Tirukkovalur (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (SENTRY-960) Blacklist reflect,java_method using hive.server2.builtin.udf.blacklist
Date Thu, 04 Feb 2016 22:52:40 GMT

     [ https://issues.apache.org/jira/browse/SENTRY-960?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Sravya Tirukkovalur updated SENTRY-960:
---------------------------------------
    Affects Version/s: 1.5.1

> Blacklist reflect,java_method using hive.server2.builtin.udf.blacklist
> ----------------------------------------------------------------------
>
>                 Key: SENTRY-960
>                 URL: https://issues.apache.org/jira/browse/SENTRY-960
>             Project: Sentry
>          Issue Type: Bug
>          Components: Sentry
>    Affects Versions: 1.5.1
>            Reporter: Ryan P
>            Assignee: Sravya Tirukkovalur
>             Fix For: 1.7.0
>
>         Attachments: SENTRY-960.10.patch, SENTRY-960.11.patch, SENTRY-960.12.patch, SENTRY-960.2.patch,
SENTRY-960.3.patch, SENTRY-960.4.patch, SENTRY-960.4.patch, SENTRY-960.5.patch, SENTRY-960.6.patch,
SENTRY-960.7.patch, SENTRY-960.8.patch, SENTRY-960.9.patch, SENTRY-960.patch
>
>
> HiveSemanticAnalyzerHookContext no longer includes built-in functions as an input to
it's Read Entities. This change hides built in functions from HiveAuthzBindingHook which is
a security hole. 
> Failing to enforce the whitelist will allow users to execute such functions as REFLECT
and JAVA_METHOD. 
> https://cwiki.apache.org/confluence/display/Hive/ReflectUDF



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message