You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@mesos.apache.org by "Alexander Rukletsov (JIRA)" <ji...@apache.org> on 2017/03/23 01:01:48 UTC

[jira] [Created] (MESOS-7292) Introduce a "sensitive mode" in Mesos which prevents leaks of sensitive data.

Alexander Rukletsov created MESOS-7292:
------------------------------------------

             Summary: Introduce a "sensitive mode" in Mesos which prevents leaks of sensitive data.
                 Key: MESOS-7292
                 URL: https://issues.apache.org/jira/browse/MESOS-7292
             Project: Mesos
          Issue Type: Improvement
          Components: security
            Reporter: Alexander Rukletsov


Consider a following scenario. A user passes some sensitive data in an environment variable to a task. These data may be logged by Mesos components, e.g., executor as part of {{mesos-containerizer}} invocation. While this is useful for debugging, this might be an issue in some production environments.

One of the solution is to have global "sensitive mode", that turns off logging of such sensitive data.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)