[MAPREDUCE-899] When using LinuxTaskController, localized files may become accessible to unintended users if permissions are misconfigured.

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.21.0
• Component/s: tasktracker
• Hadoop Flags: Incompatible change, Reviewed

Release Note

Added configuration "mapreduce.tasktracker.group", a group name to which TaskTracker belongs. When LinuxTaskController is used, task-controller binary's group owner should be this group. The same should be specified in task-controller.cfg also.

• Assignee: Amareshwari Sriramadasu
• Reporter: Vinod Kumar Vavilapalli
• Created: 21/Aug/09 09:15
• Updated: 24/Aug/10 21:15
• Resolved: 31/Jan/10 12:06

Description

To enforce the accessibility of job files to only the job-owner and the TaskTracker, as per MAPREDUCE-842, it is trusted that the setuid/setgid linux TaskController binary is group owned by a special group to which only TaskTracker belongs and not just any group to which TT belongs. If the trust is broken, possibly due to misconfiguration by admins, the local files become accessible to unintended users, yet giving false sense of security to the admins.

Issue Links

• relates to: MAPREDUCE-981 TaskTracker.purgeJob fails with NPE if the job is partially localized.