Uploaded image for project: 'Mesos'
  1. Mesos
  2. MESOS-7086

Tighten up rules on IDs used in Mesos

    XMLWordPrintableJSON

Details

    • Task
    • Status: Open
    • Major
    • Resolution: Unresolved
    • None
    • None
    • None
    • None

    Description

      We currently have pretty relaxed rules on validity of IDs (e.g., TaskID, ExecutorID, PersistenceID):
      https://github.com/apache/mesos/blob/7a3df44eb6a59bd95604fd38a18dc745363d468d/src/common/validation.cpp
      https://github.com/apache/mesos/blob/7a3df44eb6a59bd95604fd38a18dc745363d468d/src/slave/validation.cpp#L40

      We should tighten up the restrictions to prevent misleading and exploitable ID and document these rules.

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. MESOS-6866 Mesos agent not checking IDs before using them as part of the paths

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              xujyan Yan Xu
              xujyan Yan Xu
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated: