Details
-
Type:
Bug
-
Status: Closed
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: 1.2.0
-
Component/s: None
-
Labels:None
Description
MAPREDUCE-4397 added the capability to switch the location of the taskcontroller.cfg file, which weakens security.
Activity
I reverted the previous patch on branch-1, branch-1.1, and branch-1.2.
Show
Owen O'Malley
added a comment - I reverted the previous patch on branch-1, branch-1.1, and branch-1.2.
As I pointed out on the security mailing list, MAPREDUCE-4397 and its equivalent in 2+, does NOT "significantly" weakens Hadoop security. To avoid going to the details, this is analogous to having a plastic deposit box inside a safe. The additional "weakness" only comes in when the safe is opened. Reverting MAPREDUCE-4397 simply replace the plastic box inside the safe with the original tin box, which is also trivial to open once the safe is opened.
Show
Luke Lu
added a comment - As I pointed out on the security mailing list, MAPREDUCE-4397 and its equivalent in 2+, does NOT "significantly" weakens Hadoop security. To avoid going to the details, this is analogous to having a plastic deposit box inside a safe. The additional "weakness" only comes in when the safe is opened. Reverting MAPREDUCE-4397 simply replace the plastic box inside the safe with the original tin box, which is also trivial to open once the safe is opened.
added 1.2.0 to fixVersion, per CHANGES.txt and above comments.
Show
Matt Foley
added a comment - added 1.2.0 to fixVersion, per CHANGES.txt and above comments.
Closed upon release of Hadoop 1.2.0.
Show
Matt Foley
added a comment - Closed upon release of Hadoop 1.2.0.
May be you should leave a comment on
MAPREDUCE-4397..