Adam B created MESOS-5708:
-----------------------------

             Summary: Add authz to /files/debug
                 Key: MESOS-5708
                 URL: https://issues.apache.org/jira/browse/MESOS-5708
             Project: Mesos
          Issue Type: Task
          Components: security
            Reporter: Adam B
            Priority: Minor
             Fix For: 1.0.0


The /files/debug endpoint exposes the attached master/agent log paths and every 
attached sandbox path, which includes the frameworkId and executorId. Even if 
sandboxes are protected, we still don't want to expose this information to 
unauthorized users.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to