[jira] [Updated] (YARN-7516) Security check for untrusted docker image

2018-01-24 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7516: Attachment: YARN-7516.015.patch > Security check for untrusted docker image > ---

[jira] [Updated] (YARN-7516) Security check for untrusted docker image

2018-01-23 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7516: Attachment: YARN-7516.014.patch > Security check for untrusted docker image > ---

[jira] [Updated] (YARN-7516) Security check for untrusted docker image

2018-01-23 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7516: Attachment: YARN-7516.013.patch > Security check for untrusted docker image > ---

[jira] [Updated] (YARN-7516) Security check for untrusted docker image

2018-01-22 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7516: Attachment: YARN-7516.012.patch > Security check for untrusted docker image > ---

[jira] [Updated] (YARN-7516) Security check for untrusted docker image

2018-01-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7516: Attachment: YARN-7516.011.patch > Security check for untrusted docker image > ---

[jira] [Updated] (YARN-7516) Security check for untrusted docker image

2018-01-18 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7516: Attachment: YARN-7516.010.patch > Security check for untrusted docker image > ---

[jira] [Updated] (YARN-7516) Security check for untrusted docker image

2018-01-12 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7516: Attachment: YARN-7516.009.patch - Clean up how trusted image is checked. - Disable ability to set_capabilitie

[jira] [Updated] (YARN-7516) Security check for untrusted docker image

2018-01-11 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7516: Attachment: YARN-7516.008.patch [~ebadger] Thanks for the review. Patch 008 will disable set_privileged for

[jira] [Updated] (YARN-7516) Security check for untrusted docker image

2018-01-09 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7516: Attachment: YARN-7516.007.patch [~ebadger] Good catch on C99 restriction. Patch 007 removed usage of boolean

[jira] [Updated] (YARN-7516) Security check for untrusted docker image

2018-01-09 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7516: Attachment: YARN-7516.006.patch - Change variable name to privileged_registry. - Improved registry name detec

[jira] [Updated] (YARN-7516) Security check for untrusted docker image

2018-01-05 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7516: Attachment: YARN-7516.005.patch - Moved validation to container-executor. > Security check for untrusted doc

[jira] [Updated] (YARN-7516) Security check for untrusted docker image

2018-01-03 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7516: Attachment: YARN-7516.004.patch [~ebadger] Patch applies. The rebased patch is attached in 004. > Security

[jira] [Updated] (YARN-7516) Security check for untrusted docker image

2017-12-21 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7516: Attachment: YARN-7516.003.patch - Fix checkstyle warnings. - Findbug issue is not introduced by this patch.

[jira] [Updated] (YARN-7516) Security check for untrusted docker image

2017-12-14 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7516: Attachment: YARN-7516.002.patch - Updated configuration in site document. > Security check for untrusted doc

[jira] [Updated] (YARN-7516) Security check for untrusted docker image

2017-12-01 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7516: Attachment: YARN-7516.001.patch - Added check for docker private registry. - Prevent mounting for public imag

[jira] [Updated] (YARN-7516) Security check for untrusted docker image

2017-11-16 Thread Eric Badger (JIRA)
[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Badger updated YARN-7516: -- Issue Type: Sub-task (was: Improvement) Parent: YARN-3611 > Security check for untrusted docker

[jira] [Updated] (YARN-7516) Security check for untrusted docker image

2017-11-16 Thread Eric Yang (JIRA)
[ https://issues.apache.org/jira/browse/YARN-7516?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Eric Yang updated YARN-7516: Description: Hadoop YARN Services can support using private docker registry image or docker image from docke