Hadoop YARN
  1. Hadoop YARN
  2. YARN-47 Security issues in YARN
  3. YARN-578

NodeManager should use SecureIOUtils for serving and aggregating logs

    Details

    • Type: Sub-task Sub-task
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.1.0-beta
    • Component/s: nodemanager
    • Labels:
      None
    • Hadoop Flags:
      Reviewed

      Description

      Log servlets for serving logs and the ShuffleService for serving intermediate outputs both should use SecureIOUtils for avoiding symlink attacks.

      1. YARN-578-20130529.patch
        26 kB
        Omkar Vinit Joshi
      2. YARN-578-20130528.patch
        22 kB
        Omkar Vinit Joshi
      3. YARN-578-20130528.1.patch
        26 kB
        Omkar Vinit Joshi
      4. YARN-578-20130520.patch
        21 kB
        Omkar Vinit Joshi
      5. YARN-578-20130520.branch-2.patch
        21 kB
        Omkar Vinit Joshi
      6. YARN-578-20130520.1.patch
        22 kB
        Omkar Vinit Joshi
      7. YARN-578-20130506.patch
        11 kB
        Omkar Vinit Joshi
      8. yarn-578-20130426.patch
        6 kB
        Omkar Vinit Joshi

        Issue Links

          Activity

          Vinod Kumar Vavilapalli created issue -
          Vinod Kumar Vavilapalli made changes -
          Field Original Value New Value
          Component/s security [ 12313041 ]
          Vinod Kumar Vavilapalli made changes -
          Summary SecureIOUtils should be used by NodeManager for serving logs and intermediate outputs NodeManager should use SecureIOUtils for serving logs and intermediate outputs
          Affects Version/s 0.23.0 [ 12315570 ]
          Description Log servlets for serving logs and the ShuffleService for serving intermediate outputs both should use SecureIOUtils for avoiding symlink attacks.
          Vinod Kumar Vavilapalli made changes -
          Parent MAPREDUCE-3101 [ 12524796 ]
          Issue Type Sub-task [ 7 ] Bug [ 1 ]
          Vinod Kumar Vavilapalli made changes -
          Project Hadoop Map/Reduce [ 12310941 ] Hadoop YARN [ 12313722 ]
          Key MAPREDUCE-3731 YARN-578
          Affects Version/s 0.23.0 [ 12315570 ]
          Component/s nodemanager [ 12319323 ]
          Component/s security [ 12313041 ]
          Vinod Kumar Vavilapalli made changes -
          Parent YARN-47 [ 12605130 ]
          Issue Type Bug [ 1 ] Sub-task [ 7 ]
          Omkar Vinit Joshi made changes -
          Assignee Vinod Kumar Vavilapalli [ vinodkv ] Omkar Vinit Joshi [ ojoshi ]
          Omkar Vinit Joshi made changes -
          Link This issue is blocked by HADOOP-9511 [ HADOOP-9511 ]
          Omkar Vinit Joshi made changes -
          Attachment yarn-578-20130426.patch [ 12580762 ]
          Omkar Vinit Joshi made changes -
          Link This issue relates to MAPREDUCE-5208 [ MAPREDUCE-5208 ]
          Omkar Vinit Joshi made changes -
          Attachment YARN-578-20130506.patch [ 12581933 ]
          Omkar Vinit Joshi made changes -
          Status Open [ 1 ] Patch Available [ 10002 ]
          Vinod Kumar Vavilapalli made changes -
          Status Patch Available [ 10002 ] Open [ 1 ]
          Vinod Kumar Vavilapalli made changes -
          Summary NodeManager should use SecureIOUtils for serving logs and intermediate outputs NodeManager should use SecureIOUtils for serving and aggregating logs
          Vinod Kumar Vavilapalli made changes -
          Link This issue blocks YARN-649 [ YARN-649 ]
          Omkar Vinit Joshi made changes -
          Attachment YARN-578-20130520.patch [ 12583925 ]
          Omkar Vinit Joshi made changes -
          Status Open [ 1 ] Patch Available [ 10002 ]
          Omkar Vinit Joshi made changes -
          Attachment YARN-578-20130520.branch-2.patch [ 12583940 ]
          Omkar Vinit Joshi made changes -
          Status Patch Available [ 10002 ] Open [ 1 ]
          Omkar Vinit Joshi made changes -
          Attachment YARN-578-20130520.1.patch [ 12583947 ]
          Omkar Vinit Joshi made changes -
          Status Open [ 1 ] Patch Available [ 10002 ]
          Omkar Vinit Joshi made changes -
          Status Patch Available [ 10002 ] Open [ 1 ]
          Omkar Vinit Joshi made changes -
          Attachment YARN-578-20130528.patch [ 12585057 ]
          Omkar Vinit Joshi made changes -
          Status Open [ 1 ] Patch Available [ 10002 ]
          Vinod Kumar Vavilapalli made changes -
          Status Patch Available [ 10002 ] Open [ 1 ]
          Omkar Vinit Joshi made changes -
          Attachment YARN-578-20130528.1.patch [ 12585133 ]
          Omkar Vinit Joshi made changes -
          Status Open [ 1 ] Patch Available [ 10002 ]
          Omkar Vinit Joshi made changes -
          Status Patch Available [ 10002 ] Open [ 1 ]
          Omkar Vinit Joshi made changes -
          Attachment YARN-578-20130529.patch [ 12585297 ]
          Omkar Vinit Joshi made changes -
          Status Open [ 1 ] Patch Available [ 10002 ]
          Vinod Kumar Vavilapalli made changes -
          Status Patch Available [ 10002 ] Resolved [ 5 ]
          Hadoop Flags Reviewed [ 10343 ]
          Fix Version/s 2.0.5-beta [ 12324029 ]
          Resolution Fixed [ 1 ]
          Kihwal Lee made changes -
          Link This issue relates to YARN-949 [ YARN-949 ]
          Arun C Murthy made changes -
          Status Resolved [ 5 ] Closed [ 6 ]

            People

            • Assignee:
              Omkar Vinit Joshi
              Reporter:
              Vinod Kumar Vavilapalli
            • Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development