[SPARK-43368] Address DOI comments about /etc/passwd

• Type: Sub-task
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.5.0
• Fix Version/s: 3.5.0
• Component/s: Spark Docker
• Assignee: Yikun Jiang
• Reporter: Yikun Jiang
• Created: 04/May/23 02:50
• Updated: 02/Jun/23 02:27
• Resolved: 02/Jun/23 02:27

Description

chgrp root /etc/passwd && chmod ug+rw /etc/passwd

Wider permissions on /etc/passwd is concerning. What use case is broken if the running user id doesn't exist?

echo ... >> /etc/passwd

Having the entrypoint itself modify /etc/passwd is fragile. Are there features that are broken if the user doesn't exist in /etc/passwd (like PostgreSQL's initdb that refuses to run)? Minimally, this should probably use useradd and usermod rather than hand editing.

Issue Links

• links to: GitHub Pull Request #45