[MESOS-8140] Executors should clear their auth tokens

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.6.0
• Component/s: executor, security
• Labels: security
• Epic Link: Executor Auth Improvements
• Assignee: James Peach
• Reporter: James Peach
• Shepherd: Greg Mann
• Created: 27/Oct/17 17:22
• Updated: 29/Apr/19 09:26
• Resolved: 23/Jan/18 22:44

Description

The built-in executors should clear MESOS_EXECUTOR_AUTHENTICATION_TOKEN from their environment since otherwise tasks running as the same user in the same container can trivially inspect it.

Issue Links

• relates to: MESOS-8018 Allow framework to opt-in to forward executor's JWT token to the tasks