You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@mesos.apache.org by "Alexander Rukletsov (JIRA)" <ji...@apache.org> on 2017/07/13 08:31:01 UTC

[jira] [Updated] (MESOS-7292) Introduce a "sensitive mode" in Mesos which prevents leaks of sensitive data.

     [ https://issues.apache.org/jira/browse/MESOS-7292?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alexander Rukletsov updated MESOS-7292:
---------------------------------------
    Labels: debugging mesosphere security  (was: mesosphere security)

> Introduce a "sensitive mode" in Mesos which prevents leaks of sensitive data.
> -----------------------------------------------------------------------------
>
>                 Key: MESOS-7292
>                 URL: https://issues.apache.org/jira/browse/MESOS-7292
>             Project: Mesos
>          Issue Type: Improvement
>          Components: security
>            Reporter: Alexander Rukletsov
>              Labels: debugging, mesosphere, newbie++, security
>
> Consider a following scenario. A user passes some sensitive data in an environment variable to a task. These data may be logged by Mesos components, e.g., executor as part of {{mesos-containerizer}} invocation. While this is useful for debugging, this might be an issue in some production environments.
> One of the solution is to have global "sensitive mode", that turns off logging of such sensitive data.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)