You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@sentry.apache.org by "Ryan P (JIRA)" <ji...@apache.org> on 2015/11/13 14:53:10 UTC

[jira] [Created] (SENTRY-960) Sentry no longer enforces it's whitelist

Ryan P created SENTRY-960:
-----------------------------

             Summary: Sentry no longer enforces it's whitelist
                 Key: SENTRY-960
                 URL: https://issues.apache.org/jira/browse/SENTRY-960
             Project: Sentry
          Issue Type: Bug
          Components: Sentry
            Reporter: Ryan P


HiveSemanticAnalyzerHookContext no longer includes built-in functions as an input to it's Read Entities. This change hides built in functions from HiveAuthzBindingHook which is a huge security hole. 

Failing to enforce the whitelist will allow users to execute such functions as REFLECT and JAVA_METHOD. 

https://cwiki.apache.org/confluence/display/Hive/ReflectUDF





--
This message was sent by Atlassian JIRA
(v6.3.4#6332)