[
https://issues.apache.org/jira/browse/HADOOP-3578?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12699218#action_12699218
]
Amar Kamat commented on HADOOP-3578:
------------------------------------
bq. the jobclient also uploads the job.jar to the DistributedCache and creates
a symlink to it
To be more precise, the jobclient copies the data from the job.jar's filesystem
to the HDFS and the creates the symlink to this location. As of today the files
are copied to system-dir/jobid/ but now will be copied to ~/.staging/jobid/
Questions :
# How and when to cleanup the staging area?
> mapred.system.dir should be accessible only to hadoop daemons
> --------------------------------------------------------------
>
> Key: HADOOP-3578
> URL: https://issues.apache.org/jira/browse/HADOOP-3578
> Project: Hadoop Core
> Issue Type: Bug
> Components: mapred
> Reporter: Amar Kamat
> Assignee: Amar Kamat
>
> Currently the jobclient accesses the {{mapred.system.dir}} to add job
> details. Hence the {{mapred.system.dir}} has the permissions of
> {{rwx-wx-wx}}. This could be a security loophole where the job files might
> get overwritten/tampered after the job submission.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
