.apache.org
> Cc: dev@zeppelin.apache.org
> Subject: RE: [DISCUSS] Change some default settings for avoiding
> unintended usages
>
> The authentication by default isn't big deal, it's could be enabled.
> It's nice to use another account by default: guest/guest, for example.
&g
Subject: RE: [DISCUSS] Change some default settings for avoiding unintended
usages
The authentication by default isn't big deal, it's could be enabled.
It's nice to use another account by default: guest/guest, for example.
Thanks,
Maksim Belousov
From: Jongyoul Lee [mailto:jon
elin.apache.org
Subject: Re: [DISCUSS] Change some default settings for avoiding unintended
usages
Agreed. Supporting container services must be good and I like this idea, but I
don't think it's the part of this issue directly. Let's talk about this issue
with another email.
1, 2017 at 2:36 PM, Felix Cheung
>> wrote:
>>
>> > I don’t think that’s limited to the shell interpreter.
>> >
>> > You can run any arbitrary program or script from python or Scala (or
>> java)
>> > as well.
>> >
>> > ___
LDAP) and access control (normal user can’t sudo and delete everything).
Thought?
_
From: Jeff Zhang
Sent: Thursday, November 30, 2017 11:51 PM
Subject: Re: [DISCUSS] Change some default settings for avoiding unintended
usages
To:
Cc: users
+1 for running
from python or Scala (or
> java)
> > as well.
> >
> > _
> > From: Jeff Zhang
> > Sent: Wednesday, November 29, 2017 4:00 PM
> > Subject: Re: [DISCUSS] Change some default settings for avoiding
> > unintended usages
> > To:
> > Cc: users
> >
>
n’t think that’s limited to the shell interpreter.
>
> You can run any arbitrary program or script from python or Scala (or java)
> as well.
>
> _
> From: Jeff Zhang
> Sent: Wednesday, November 29, 2017 4:00 PM
> Subject: Re: [DISCUSS] Change some de
I don’t think that’s limited to the shell interpreter.
You can run any arbitrary program or script from python or Scala (or java) as
well.
_
From: Jeff Zhang
Sent: Wednesday, November 29, 2017 4:00 PM
Subject: Re: [DISCUSS] Change some default settings for avoiding
Would be nice if each user's interpreter is started in its own docker
container a-la cloudera data science workbench.
Then each user's shell interpreter is pretty isolated.
Actually, from a CDSW session you could pop up a terminal session to your
container which I found pretty neat.
--
Ruslan D
Shell interpreter is a black hole for security, usually we don't recommend
or allow user to use shell.
We may need to refactor the shell interpreter, running under zeppelin user
is too dangerous.
Jongyoul Lee 于2017年11月29日周三 下午11:44写道：
> Hi, users and dev,
>
> Recently, I've got an issue abou
Hi, users and dev,
Recently, I've got an issue about the abnormal usage of some interpreters.
Zeppelin's users can access shell by shell and python interpreters. It
means all users can run or execute what they want even if it harms the
system. Thus I agree that we need to change some default setti
11 matches
Mail list logo
