[MESOS-7041] Default CommandInfo usage to not use the shell.

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Assignee: Unassigned
• Reporter: James Peach
• Created: 31/Jan/17 18:34
• Updated: 29/Apr/19 09:26

Description

One of the usage patterns of CommandInfo is to carry commands from isolators to launchers. The default (and easiest) way to use this is launchInfo.add_pre_exec_commands()->set_value(...), which invokes the shell. To reduce the risk of shell injection attacks all isolators should default to not using the shell, which implies that this should be the easiest/default usage pattern.

Issue Links

• is related to: MESOS-6862 Replace os::system usages to reduce the risk of command injection.