You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-dev@hadoop.apache.org by "Robert Joseph Evans (JIRA)" <ji...@apache.org> on 2012/05/31 23:30:23 UTC

[jira] [Created] (HADOOP-8461) Programatically prevent symlink attacks on hadoop pid files

Robert Joseph Evans created HADOOP-8461:
-------------------------------------------

             Summary: Programatically prevent symlink attacks on hadoop pid files
                 Key: HADOOP-8461
                 URL: https://issues.apache.org/jira/browse/HADOOP-8461
             Project: Hadoop Common
          Issue Type: Bug
    Affects Versions: 2.0.0-alpha, 1.0.3
            Reporter: Robert Joseph Evans


pid files stored in  HADOOP_PID_DIR and HADOOP_SECURE_DN_PID_DIR are vulnerable to symlink attacks when not properly set.  We should programatically prevent symlink attacks on these files even if the directories are set to something that others can write to.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira