[MESOS-7292] Introduce a "sensitive mode" in Mesos which prevents leaks of sensitive data.

• Type: Improvement
• Status: Accepted
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Labels: debugging mesosphere newbie++ security
• Assignee: Unassigned
• Reporter: Alex R
• Created: 23/Mar/17 01:00
• Updated: 29/Apr/19 09:27

Description

Consider a following scenario. A user passes some sensitive data in an environment variable to a task. These data may be logged by Mesos components, e.g., executor as part of mesos-containerizer invocation. While this is useful for debugging, this might be an issue in some production environments.

One of the solution is to have global "sensitive mode", that turns off logging of such sensitive data.

Issue Links

• is related to: MESOS-7421 Generally avoid leaking possibly sensitive data to logs.
• is related to: MESOS-8413 Zookeeper configuration passwords are shown in clear text
• relates to: MESOS-8229 Make it possible to reliably inject environment variables into forked processes
• links to: How Marathon handles ENV Variable security
• links to: Mesos containerizer displays sensitive data via env variable in stdout