[HIVE-10658] Insert with values clause may expose data that should be encrypted

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.1.0
• Fix Version/s: 1.2.1
• Component/s: Security
• Assignee: Eugene Koifman
• Reporter: Eugene Koifman
• Created: 08/May/15 18:46
• Updated: 01/Oct/19 22:07
• Resolved: 22/May/15 20:29

Description

Insert into T values() operation uses temporary table.
the data in temp tables is stored under the hive.exec.scratchdir which is not usually encrypted. This is a similar issue to using scratchdir for staging query results