[
https://issues.apache.org/jira/browse/MESOS-8140?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Gavin updated MESOS-8140:
-------------------------
Comment: was deleted
(was: www.rtat.net)
> Executors should clear their auth tokens
> ----------------------------------------
>
> Key: MESOS-8140
> URL: https://issues.apache.org/jira/browse/MESOS-8140
> Project: Mesos
> Issue Type: Bug
> Components: executor, security
> Reporter: James Peach
> Assignee: James Peach
> Priority: Major
> Labels: security
> Fix For: 1.6.0
>
>
> The built-in executors should clear {{MESOS_EXECUTOR_AUTHENTICATION_TOKEN}}
> from their environment since otherwise tasks running as the same user in the
> same container can trivially inspect it.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
