[ 
https://issues.apache.org/jira/browse/HADOOP-6187?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Pallavi Palleti updated HADOOP-6187:
------------------------------------

    Attachment: Hadoop-6187.patch

The patch restricts super user access only from some specified IP range if it 
is configured. if not, it works by default allowing super user access from any 
where. 

> Allow Super user access only from certian trusted IP Range- This is to avoid 
> spoofing by others as super user and gain access to the cluster
> --------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: HADOOP-6187
>                 URL: https://issues.apache.org/jira/browse/HADOOP-6187
>             Project: Hadoop Common
>          Issue Type: New Feature
>          Components: ipc
>    Affects Versions: 0.20.0
>            Reporter: Pallavi Palleti
>            Priority: Minor
>         Attachments: Hadoop-6187.patch
>
>
> The current hadoop environment assumes  that everything is trusted 
> environment and so doesn't have any security checks. This might lead to any 
> one to spoof as super user and gain access to the cluster if the environment 
> is open for every one. So, there is a need to restrict super user permission 
> only from certain IP addresses. 

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to