You are viewing a plain text version of this content. The canonical link for it is here.
Posted to yarn-issues@hadoop.apache.org by "Allen Wittenauer (JIRA)" <ji...@apache.org> on 2017/06/13 15:27:00 UTC
[jira] [Updated] (YARN-6709) Root privilege escalation in
experimental Docker support
[ https://issues.apache.org/jira/browse/YARN-6709?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Allen Wittenauer updated YARN-6709:
-----------------------------------
Description: YARN-3853 and friends do not do enough input validation. They allow a user to do escalate privileges at root trivially. See https://effectivemachines.com/2017/06/02/docker-security-in-framework-managed-multi-user-environments/ for more information. (was: YARN-3853 and friends do not do enough input validation. They allow a user to do escalate privileges at root trivially.)
> Root privilege escalation in experimental Docker support
> --------------------------------------------------------
>
> Key: YARN-6709
> URL: https://issues.apache.org/jira/browse/YARN-6709
> Project: Hadoop YARN
> Issue Type: Bug
> Components: nodemanager, security
> Affects Versions: 2.8.0, 3.0.0-alpha1, 3.0.0-alpha2
> Reporter: Allen Wittenauer
> Assignee: Varun Vasudev
> Priority: Blocker
> Labels: security
> Fix For: 2.8.1, 3.0.0-alpha3
>
>
> YARN-3853 and friends do not do enough input validation. They allow a user to do escalate privileges at root trivially. See https://effectivemachines.com/2017/06/02/docker-security-in-framework-managed-multi-user-environments/ for more information.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org