[
https://issues.apache.org/jira/browse/YARN-6709?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Allen Wittenauer resolved YARN-6709.
------------------------------------
Resolution: Fixed
This was fixed as part of a series of commits done via security@hadoop. JIRA
filed for future release notes and changelog generation.
> Root privilege escalation in experimental Docker support
> --------------------------------------------------------
>
> Key: YARN-6709
> URL: https://issues.apache.org/jira/browse/YARN-6709
> Project: Hadoop YARN
> Issue Type: Bug
> Components: nodemanager, security
> Affects Versions: 2.8.0, 3.0.0-alpha1, 3.0.0-alpha2
> Reporter: Allen Wittenauer
> Assignee: Varun Vasudev
> Priority: Blocker
> Labels: security
> Fix For: 3.0.0-alpha3, 2.8.1
>
>
> YARN-3853 and friends do not do enough input validation. They allow a user to
> do escalate privileges at root trivially.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
