[
https://issues.apache.org/jira/browse/AURORA-1723?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15348856#comment-15348856
]
Stephan Erb commented on AURORA-1723:
-------------------------------------
You've mentioned that you think making the downloaded file is a security risk.
Could you please elaborate? For me, it seems like that the user submitting the
task is allowed to run arbitrary code anyway.
> Add support for Mesos Fetcher
> -----------------------------
>
> Key: AURORA-1723
> URL: https://issues.apache.org/jira/browse/AURORA-1723
> Project: Aurora
> Issue Type: Task
> Components: Scheduler
> Reporter: Renan DelValle
> Priority: Minor
> Labels: features
>
> Adding support for Aurora Tasks to be capable of using the [Mesos
> Fetcher|http://mesos.apache.org/documentation/latest/fetcher/] by allowing
> the client to provide arbitrary URIs at which resources can be retrieved.
> Resources will be marked non-executable to avoid security risks.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
