[ 
https://issues.apache.org/jira/browse/MAPREDUCE-5202?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13648875#comment-13648875
 ] 

Luke Lu commented on MAPREDUCE-5202:
------------------------------------

As I pointed out on the security mailing list, MAPREDUCE-4397 and its 
equivalent in 2+, does NOT "significantly" weakens Hadoop security. To avoid 
going to the details, this is analogous to having a plastic deposit box inside 
a safe. The _additional_ "weakness" only comes in when the safe is opened. 
Reverting MAPREDUCE-4397 simply replace the plastic box inside the safe with 
the original tin box, which is also trivial to open once the safe is opened.
                
> Revert MAPREDUCE-4397 to avoid using incorrect config files
> -----------------------------------------------------------
>
>                 Key: MAPREDUCE-5202
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-5202
>             Project: Hadoop Map/Reduce
>          Issue Type: Bug
>            Reporter: Owen O'Malley
>            Assignee: Owen O'Malley
>
> MAPREDUCE-4397 added the capability to switch the location of the 
> taskcontroller.cfg file, which weakens security.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to