Github user kanzhang commented on the pull request:

    https://github.com/apache/spark/pull/6676#issuecomment-110525000
  
    > And I thought we agreed there's no point in trying to fix that, because 
since they're all running as the same user, they can do things like read the 
certs used to encrypt the other app's traffic, read the other app's memory, and 
all other nasty things.
    
    My thought was we can still make some gain by leveraging process-level 
isolation, even though they are running as the same user. Apps won't 
automatically read each other's memory, right? Being able to read others' SSL 
certs doesn't mean one can decrypt traffic. Each session is encrypted using a 
freshly generated session key.
    
    > It's bad to use stdin for this. For one, it has weird semantics on 
Windows. And for second, stdout and stdin are generally considered to belong to 
the application, and thus Spark shouldn't really touch them if possible.
    
    That's a valid point. Thanks for bringing it up. I'm not familiar with 
Windows. Can you expand a little?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to