[
https://issues.apache.org/jira/browse/MESOS-8140?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
James Peach updated MESOS-8140:
-------------------------------
Description: The built-in executors should clear
{{MESOS_EXECUTOR_AUTHENTICATION_TOKEN}} from their environment since otherwise
tasks running as the same user in the same container can trivially inspect it.
(was: The built-in executors should clear `MESOS_EXECUTOR_AUTHENTICATION_TOKEN`
from their environment since otherwise tasks running as the same user in the
same container can trivially inspect it.)
> Executors should clear their auth tokens
> ----------------------------------------
>
> Key: MESOS-8140
> URL: https://issues.apache.org/jira/browse/MESOS-8140
> Project: Mesos
> Issue Type: Bug
> Components: executor, security
> Reporter: James Peach
> Fix For: 1.5.0
>
>
> The built-in executors should clear {{MESOS_EXECUTOR_AUTHENTICATION_TOKEN}}
> from their environment since otherwise tasks running as the same user in the
> same container can trivially inspect it.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
