You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@pig.apache.org by "Prashant Kommireddi (JIRA)" <ji...@apache.org> on 2014/09/25 23:48:33 UTC

[jira] [Commented] (PIG-4080) Add Preprocessor commands and more to the black/whitelisting feature

    [ https://issues.apache.org/jira/browse/PIG-4080?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14148363#comment-14148363 ] 

Prashant Kommireddi commented on PIG-4080:
------------------------------------------

Thanks Daniel!

> Add Preprocessor commands and more to the black/whitelisting feature
> --------------------------------------------------------------------
>
>                 Key: PIG-4080
>                 URL: https://issues.apache.org/jira/browse/PIG-4080
>             Project: Pig
>          Issue Type: Improvement
>    Affects Versions: 0.14.0, 0.13.1
>            Reporter: Prashant Kommireddi
>            Assignee: Prashant Kommireddi
>             Fix For: 0.14.0
>
>         Attachments: PIG-4080.patch, PIG-4080_2.patch
>
>
> Executing Pig scripts in a multi-tenant environment within the context of the app server requires disabling certain other commands that could be dangerous. For eg, the shell commands contained within the pig script will be executed as the user (possibly superuser) on the app server. The following is an example
> %declare X `id`;
> An admin might want to disable certain features, such as either disabling "shell" entirely or even being extra cautious by disabling "declare". Some more commands that could be disabled are - default, define (dynamic invokers), run and exec.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)