You are viewing a plain text version of this content. The canonical link for it is here.
Posted to yarn-issues@hadoop.apache.org by "KWON BYUNGCHANG (JIRA)" <ji...@apache.org> on 2019/05/27 03:32:00 UTC
[jira] [Created] (YARN-9583) Failed job which is submitted unknown
queue is showed all users
KWON BYUNGCHANG created YARN-9583:
-------------------------------------
Summary: Failed job which is submitted unknown queue is showed all users
Key: YARN-9583
URL: https://issues.apache.org/jira/browse/YARN-9583
Project: Hadoop YARN
Issue Type: Bug
Components: security
Affects Versions: 3.1.2
Reporter: KWON BYUNGCHANG
Failed job which is submitted unknown queue is showed all users.
I attached RM UI screen shot.
reproduction senario
1. user foo submit job to unknown queue without view-acl and failed job.
2. user bar can access job of user foo.
According to comments in QueueACLsManager .java that caused the problem.
This situation can happen when RM is restarted after deletion queue.
I think showing app of non existing queue to all users is the problem after RM start.
It will become a security hole.
I fixed it a little bit.
After fixing it, Both owner of job and admin of yarn can access job which is submitted unknown queue.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org