[MAPREDUCE-1991] taskcontroller allows stealing permissions on any local file

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Invalid
• Affects Version/s: 0.22.0
• Fix Version/s: 0.22.0
• Component/s: task-controller
• Assignee: Todd Lipcon
• Reporter: Todd Lipcon
• Created: 03/Aug/10 02:23
• Updated: 20/Oct/11 22:30
• Resolved: 20/Oct/11 22:30

Description

The linux task-controller setuid binary allows a malicious user to chmod any file on the system to 644 (and as a side effect appends some junk to the end)