Github user andrewor14 commented on the pull request:
https://github.com/apache/spark/pull/8218#issuecomment-137236868
@vanzin sorry I couldn't review this in time. While looking through the
code I was wondering about two things:
(1) See my inline comment
(2) Looks like the app ID is relatively easy to spoof? Aren't they listed
in the standalone Master / RM UI? Should we use something that's more like a
secret, like what we do in `YarnShuffleService`? The only problem there is that
in standalone mode I'm not sure if we can securely pass secrets from drivers to
executors.
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
