Allen Wittenauer created HADOOP-13957:
-----------------------------------------

             Summary: prevent bad PATHs
                 Key: HADOOP-13957
                 URL: https://issues.apache.org/jira/browse/HADOOP-13957
             Project: Hadoop Common
          Issue Type: New Feature
          Components: security
    Affects Versions: 3.0.0-alpha2
            Reporter: Allen Wittenauer


Apache Hadoop daemons should fail to start if the shell PATH contains world 
writable directories or '.' (cwd).  Doing so would close an attack vector on 
misconfigured systems.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-dev-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-dev-h...@hadoop.apache.org

Reply via email to