[ 
https://issues.apache.org/jira/browse/HADOOP-8461?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Allen Wittenauer resolved HADOOP-8461.
--------------------------------------
    Resolution: Duplicate

> Programatically prevent symlink attacks on hadoop pid files
> -----------------------------------------------------------
>
>                 Key: HADOOP-8461
>                 URL: https://issues.apache.org/jira/browse/HADOOP-8461
>             Project: Hadoop Common
>          Issue Type: Bug
>    Affects Versions: 1.0.3, 2.0.0-alpha
>            Reporter: Robert Joseph Evans
>
> pid files stored in  HADOOP_PID_DIR and HADOOP_SECURE_DN_PID_DIR are 
> vulnerable to symlink attacks when not properly set.  We should 
> programatically prevent symlink attacks on these files even if the 
> directories are set to something that others can write to.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to