[MAPREDUCE-2096] Secure local filesystem IO from symlink vulnerabilities

• Type: Bug
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 0.22.0
• Fix Version/s: 0.22.0
• Component/s: jobtracker, security, tasktracker
• Hadoop Flags: Reviewed
• Release Note: The TaskTracker now uses the libhadoop JNI library to operate securely on local files when security is enabled. Secure clusters must ensure that libhadoop.so is available to the TaskTracker.
• Assignee: Todd Lipcon
• Reporter: Todd Lipcon
• Created: 28/Sep/10 19:46
• Updated: 12/Dec/11 06:18
• Resolved: 06/Jan/11 18:42

Description

This JIRA is to contribute a patch developed on the private security@ mailing list.

The vulnerability is that MR daemons occasionally open files that are located in a path where the user has write access. A malicious user may place a symlink in place of the expected file in order to cause the daemon to instead read another file on the system – one which the attacker may not naturally be able to access. This includes delegation tokens belong to other users, log files, keytabs, etc.

Issue Links

• is blocked by: HADOOP-6978 Add JNI support for secure IO operations