[MESOS-6027] Executor stdout/stderr should not be world-readable

• Type: Bug
• Status: Accepted
• Priority: Major
• Resolution: Unresolved
• Labels: newbie security
• Assignee: Gaojin CAO
• Reporter: Adam B
• Created: 11/Aug/16 07:25
• Updated: 12/Aug/16 08:35

Description

Running a task as 'nobody':

sh -c 'whoami && ls -l && sleep 1001'
nobody
-rw-r--r--. 1 nobody nobody 2199 Jul  7 00:12 stderr
-rw-r--r--. 1 nobody nobody  208 Jul  7 00:12 stdout

As a user of a multi-tenant Mesos, I would expect my task logs to be inaccessible to other users/tasks on the same node. Filesystem isolation helps from one angle, but basic Linux filesystem permissions are just good practice.

There's no reason that any user other than the task user (i.e. the task itself) and root (e.g. Mesos agent) should be able to access these logs.

Issue Links

• is related to: MESOS-5856 Logrotate ContainerLogger module does not rotate logs when run as root with `--switch_user`.