mapred.system.dir should be accessible only to hadoop daemons 
--------------------------------------------------------------

                 Key: HADOOP-3578
                 URL: https://issues.apache.org/jira/browse/HADOOP-3578
             Project: Hadoop Core
          Issue Type: Bug
          Components: mapred
            Reporter: Amar Kamat


Currently the jobclient accesses the {{mapred.system.dir}} to add job details. 
Hence the {{mapred.system.dir}} has the permissions of {{rwx-wx-wx}}. This 
could be a security loophole where the job files might get overwritten/tampered 
after the job submission. 

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to