[
https://issues.apache.org/jira/browse/HADOOP-16482?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16897501#comment-16897501
]
Steve Loughran commented on HADOOP-16482:
-----------------------------------------
straightforward to fix; we just make S3AFilesystem.qualify() verify authorities
after the qualification process has completed.
> S3A doesn't actually verify paths have the correct authority
> ------------------------------------------------------------
>
> Key: HADOOP-16482
> URL: https://issues.apache.org/jira/browse/HADOOP-16482
> Project: Hadoop Common
> Issue Type: Sub-task
> Components: fs/s3
> Affects Versions: 3.1.0
> Reporter: Steve Loughran
> Priority: Major
>
> Probably been around a *long* time, but we've never noticed, assuming that
> {{Path.makeQualified(uri, workingDir)}} did the right thing.
> You can provide any s3a URI to an S3 command and it'll get mapped to the
> current bucket without any validation that the authorities are equal. Oops.
--
This message was sent by Atlassian JIRA
(v7.6.14#76016)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
