You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@mesos.apache.org by ji...@apache.org on 2016/07/21 16:02:28 UTC
[1/2] mesos git commit: Updated upgrades.md with fetcher user changes.
Repository: mesos
Updated Branches:
refs/heads/master 490aef31f -> a95ab8ba1
Updated upgrades.md with fetcher user changes.
The fetcher was changed to assume the same user as a task when fetching
files. This patch updates upgrades.md accordingly.
Review: https://reviews.apache.org/r/50284/
Project: http://git-wip-us.apache.org/repos/asf/mesos/repo
Commit: http://git-wip-us.apache.org/repos/asf/mesos/commit/a95ab8ba
Tree: http://git-wip-us.apache.org/repos/asf/mesos/tree/a95ab8ba
Diff: http://git-wip-us.apache.org/repos/asf/mesos/diff/a95ab8ba
Branch: refs/heads/master
Commit: a95ab8ba140f4554c0f9417dc10a7463f5df71d3
Parents: 76ce357
Author: Greg Mann <gr...@mesosphere.io>
Authored: Thu Jul 21 09:02:12 2016 -0700
Committer: Jie Yu <yu...@gmail.com>
Committed: Thu Jul 21 09:02:26 2016 -0700
----------------------------------------------------------------------
docs/upgrades.md | 5 +++++
1 file changed, 5 insertions(+)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/mesos/blob/a95ab8ba/docs/upgrades.md
----------------------------------------------------------------------
diff --git a/docs/upgrades.md b/docs/upgrades.md
index 1c871c4..80aa8f4 100644
--- a/docs/upgrades.md
+++ b/docs/upgrades.md
@@ -54,6 +54,7 @@ We categorize the changes as follows:
<li>R <a href="#1-0-x-executor-environment-variables">Executor environment variables inheritance</a></li>
<li>R <a href="#1-0-x-deprecated-fields-in-container-config">Deprecated fields in ContainerConfig</a></li>
<li>C <a href="#1-0-x-persistent-volume-ownership">Persistent volume ownership</a></li>
+ <li>C <a href="#1-0-x-fetcher-user">Fetcher assumes same user as task</a></li>
</ul>
</td>
<td style="word-wrap: break-word; overflow-wrap: break-word;"><!--Flags-->
@@ -272,6 +273,10 @@ We categorize the changes as follows:
* Namespace and header file of `Allocator` has been moved to be consistent with other packages.
+<a name="1-0-x-fetcher-user"></a>
+
+* When a task is run as a particular user, the fetcher now fetches files as that user also. Note, this means that filesystem permissions for that user will be enforced when fetching local files.
+
<a name="1-0-x-endpoint-authorization"></a>
* Mesos 1.0 introduces authorization support for several HTTP endpoints. Note that some of these endpoints are used by the web UI, and thus using the web UI in a cluster with authorization enabled will require that ACLs be set appropriately. Please refer to the [authorization documentation](authorization.md) for details.
[2/2] mesos git commit: Updated CHANGELOG with fetcher user changes.
Posted by ji...@apache.org.
Updated CHANGELOG with fetcher user changes.
The fetcher was changed to assume the same user as a task when fetching
files. This patch updates the CHANGELOG accordingly.
Review: https://reviews.apache.org/r/50283/
Project: http://git-wip-us.apache.org/repos/asf/mesos/repo
Commit: http://git-wip-us.apache.org/repos/asf/mesos/commit/76ce357a
Tree: http://git-wip-us.apache.org/repos/asf/mesos/tree/76ce357a
Diff: http://git-wip-us.apache.org/repos/asf/mesos/diff/76ce357a
Branch: refs/heads/master
Commit: 76ce357aa1ab9a28d108ed42cd0b6ecb31a564f4
Parents: 490aef3
Author: Greg Mann <gr...@mesosphere.io>
Authored: Thu Jul 21 09:02:05 2016 -0700
Committer: Jie Yu <yu...@gmail.com>
Committed: Thu Jul 21 09:02:26 2016 -0700
----------------------------------------------------------------------
CHANGELOG | 1 +
1 file changed, 1 insertion(+)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/mesos/blob/76ce357a/CHANGELOG
----------------------------------------------------------------------
diff --git a/CHANGELOG b/CHANGELOG
index b9aa894..d55e7e8 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -411,6 +411,7 @@ All Issues:
* [MESOS-5794] - Agent's /containers endpoint should skip terminated executors.
* [MESOS-5799] - docker::inspect() may get wrong output when a docker container is not in "running" state
* [MESOS-5806] - CNI isolator should prepare network related /etc/* files for containers using host mode but specify container images
+ * [MESOS-5845] - The fetcher can access any local file as root
* [MESOS-5863] - Enabling SSL causes fetcher fail to fetch from HTTPS sites.
** Documentation