You are viewing a plain text version of this content. The canonical link for it is here.
Posted to yarn-dev@hadoop.apache.org by "Allen Wittenauer (JIRA)" <ji...@apache.org> on 2017/06/13 15:27:00 UTC
[jira] [Resolved] (YARN-6709) Root privilege escalation in
experimental Docker support
[ https://issues.apache.org/jira/browse/YARN-6709?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Allen Wittenauer resolved YARN-6709.
------------------------------------
Resolution: Fixed
This was fixed as part of a series of commits done via security@hadoop. JIRA filed for future release notes and changelog generation.
> Root privilege escalation in experimental Docker support
> --------------------------------------------------------
>
> Key: YARN-6709
> URL: https://issues.apache.org/jira/browse/YARN-6709
> Project: Hadoop YARN
> Issue Type: Bug
> Components: nodemanager, security
> Affects Versions: 2.8.0, 3.0.0-alpha1, 3.0.0-alpha2
> Reporter: Allen Wittenauer
> Assignee: Varun Vasudev
> Priority: Blocker
> Labels: security
> Fix For: 3.0.0-alpha3, 2.8.1
>
>
> YARN-3853 and friends do not do enough input validation. They allow a user to do escalate privileges at root trivially.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-dev-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-dev-help@hadoop.apache.org