[ 
https://issues.apache.org/jira/browse/MESOS-1790?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14511125#comment-14511125
 ] 

Jim Klucar commented on MESOS-1790:
-----------------------------------

Not sure what you're suggesting here. For security reasons, chown always
clears the suid/sgid bits. Everything I've seen and tried shows no way
around it. I guess the fetcher could check the status of the bits before
the chown and try to reset the permissions with a chmod, but that seems to
have its own headaches.




> Add "chown" option to CommandInfo.URI
> -------------------------------------
>
>                 Key: MESOS-1790
>                 URL: https://issues.apache.org/jira/browse/MESOS-1790
>             Project: Mesos
>          Issue Type: Improvement
>            Reporter: Vinod Kone
>            Assignee: Jim Klucar
>              Labels: mesosphere, newbie
>         Attachments: 
> 0001-MESOS-1790-Adds-chown-option-to-CommandInfo.URI.patch
>
>
> Mesos fetcher always chown()s the extracted executor URIs as the executor 
> user but sometimes this is not desirable, e.g., "setuid" bit gets lost during 
> chown() if slave/fetcher is running as root. 
> It would be nice to give frameworks the ability to skip the chown.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to