Uploaded image for project: 'Pig'
  1. Pig
  2. PIG-3511

Security: Pig temporary directories might have world readable permissions

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 0.13.0
    • None
    • None

    Description

      Currently, udf jars are copied to FileLocalizer.getTemporaryPath which is a unsecured location. We need to make sure the directory that we copy these jars to have 700 permission settings (similar behavior as JobClient).

      Attachments

        1. PIG-3511-1.patch
          25 kB
          Rohini Palaniswamy

        Issue Links

          is related to

          Sub-task - The sub-task of the issue YARN-1575 Public localizer crashes with "Localized unkown resource"

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            People

              rohini Rohini Palaniswamy
              aniket486 Aniket Namadeo Mokashi
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: