[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13464504#comment-13464504 ] Luke Lu commented on HADOOP-8803: - bq. it's pretty easy to fool most switches into

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13464309#comment-13464309 ] Luke Lu commented on HADOOP-8803: - bq. The attacker just uses the compromised machine to

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13464369#comment-13464369 ] Andy Isaacson commented on HADOOP-8803: --- bq. In switched networks, which all

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13462858#comment-13462858 ] Daryn Sharp commented on HADOOP-8803: - I admire the goal. Perhaps I'm not

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13461929#comment-13461929 ] Xianqing Yu commented on HADOOP-8803: - Hi Daryn, Thanks for your comments. To answer

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13461940#comment-13461940 ] Xianqing Yu commented on HADOOP-8803: - Hi Daryn and Owen, Here is my thought about

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13461968#comment-13461968 ] Xianqing Yu commented on HADOOP-8803: - Hi Steve, First, even hypversior (Xen or

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13462043#comment-13462043 ] Xianqing Yu commented on HADOOP-8803: - Hi Luke, Even block id is randomly generated,

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13459825#comment-13459825 ] Luke Lu commented on HADOOP-8803: - bq. as long as the hacker can get root privilege, she

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13457734#comment-13457734 ] Steve Loughran commented on HADOOP-8803: Cloud provider can add additional

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13457980#comment-13457980 ] Xianqing Yu commented on HADOOP-8803: - Hi Steve, I am proposing the whole Hadoop

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13457534#comment-13457534 ] Xianqing Yu commented on HADOOP-8803: - Hi Luke, Thank you for your comment. To your

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13455652#comment-13455652 ] Luke Lu commented on HADOOP-8803: - bq. 1. No, more restrictive HDFS delegation token and

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13455698#comment-13455698 ] Steve Loughran commented on HADOOP-8803: Are you proposing that Hadoop (more

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13455830#comment-13455830 ] Daryn Sharp commented on HADOOP-8803: - I've done a lot of token work, and have

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13456075#comment-13456075 ] Xianqing Yu commented on HADOOP-8803: - Hi Kingshuk, From long term, new features in

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13455025#comment-13455025 ] Xianqing Yu commented on HADOOP-8803: - I would like to discuss this topic with hadoop

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13455120#comment-13455120 ] Todd Lipcon commented on HADOOP-8803: - Hi Xianqing, To me, the latter is much more

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13455162#comment-13455162 ] Xianqing Yu commented on HADOOP-8803: - Hi Todd, Byte-range access control is mainly

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13455167#comment-13455167 ] Xianqing Yu commented on HADOOP-8803: - Hi Todd, Just to clarify my point, I don't

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13455181#comment-13455181 ] Todd Lipcon commented on HADOOP-8803: - Oh, I see. So, you'd modify

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13455188#comment-13455188 ] Xianqing Yu commented on HADOOP-8803: - Simply said, yes. But more than that. Not just

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13455221#comment-13455221 ] Todd Lipcon commented on HADOOP-8803: - Makes sense, but I think it's going to be

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13455267#comment-13455267 ] Xianqing Yu commented on HADOOP-8803: - My code indeed spread wildly over the hadoop,

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13455357#comment-13455357 ] Owen O'Malley commented on HADOOP-8803: --- The performance impact of trying to do

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13455420#comment-13455420 ] Xianqing Yu commented on HADOOP-8803: - Hi Owen, Thanks for your comments. The

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13455473#comment-13455473 ] Luke Lu commented on HADOOP-8803: - Hi Xianqing, if I understand your proposal correctly,

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13455509#comment-13455509 ] Xianqing Yu commented on HADOOP-8803: - Hi Luke, 1. No, more restrictive HDFS

[jira] [Commented] (HADOOP-8803) Make Hadoop running more secure public cloud envrionment

[ https://issues.apache.org/jira/browse/HADOOP-8803?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13455532#comment-13455532 ] Kingshuk Chatterjee commented on HADOOP-8803: - Xianqing, one thing that we