Uploaded image for project: 'Hadoop YARN'
  1. Hadoop YARN
  2. YARN-8249

Few REST api's in RMWebServices are missing static user check

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 3.1.0
    • Fix Version/s: 2.10.0, 3.2.0, 3.1.1
    • Component/s: webapp, yarn
    • Labels:
      None

      Description

      Few REST endpoints like node label/ scheduler-conf etc are missing static user validation check. Writable apis should not be ran for static users. This is not a security hole as such as yarn.admin.acls will be configured to certain users in secure cluster correctly. However such a check will help to have same semantics across various apis. 

        Attachments

        1. YARN-8249.branch-2.001.patch
          39 kB
          Sunil Govindan
        2. YARN-8249.006.patch
          38 kB
          Vinod Kumar Vavilapalli
        3. YARN-8249.005.patch
          39 kB
          Sunil Govindan
        4. YARN-8249.004.patch
          30 kB
          Sunil Govindan
        5. YARN-8249.003.patch
          30 kB
          Sunil Govindan
        6. YARN-8249.002.patch
          21 kB
          Sunil Govindan
        7. YARN-8249.001.patch
          18 kB
          Sunil Govindan

          Activity

            People

            • Assignee:
              sunilg Sunil Govindan
              Reporter:
              sunilg Sunil Govindan
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: