[jira] [Updated] (HIVE-11670) Strip out password information from TezSessionState configuration

["Hari Sankar Sivarama Subramaniyan (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HIVE-11670?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Hari Sankar Sivarama Subramaniyan updated HIVE-11670:
-----------------------------------------------------
    Attachment: HIVE-11670.1.patch

[~thejas] Can you please look at the change and see if it makes sense. I tested this locally.

Thanks
Hari

> Strip out password information from TezSessionState configuration
> -----------------------------------------------------------------
>
>                 Key: HIVE-11670
>                 URL: https://issues.apache.org/jira/browse/HIVE-11670
>             Project: Hive
>          Issue Type: Bug
>            Reporter: Hari Sankar Sivarama Subramaniyan
>            Assignee: Hari Sankar Sivarama Subramaniyan
>         Attachments: HIVE-11670.1.patch
>
>
> Remove password information from configuration copy that is sent to Yarn/Tez. We don't need it there. The config entries can potentially be visible to other users.
> HIVE-10508 had the fix which removed this in certain places, however, when I initiated a session via Hive Cli, I could still see the password information.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)