[ 
https://issues.apache.org/jira/browse/AMBARI-26537?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18011789#comment-18011789
 ] 

Vijayakumar Govindasamy commented on AMBARI-26537:
--------------------------------------------------

[https://github.com/apache/ambari/pull/4045] 

> Security: Remove command file json after execution of a task
> ------------------------------------------------------------
>
>                 Key: AMBARI-26537
>                 URL: https://issues.apache.org/jira/browse/AMBARI-26537
>             Project: Ambari
>          Issue Type: Improvement
>    Affects Versions: 3.0.0
>            Reporter: Vijayakumar Govindasamy
>            Assignee: Vijayakumar Govindasamy
>            Priority: Major
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> Problem:
> Default command file retention policy is to keep after the execution. Command 
> files may have sensitive data and keeping it may expose security risk
> Fix:
> Proposed to change the default behaviour of command file retention policy to 
> remove. For the purpose of debugging if anyone wants to keep the file, they 
> can always change in agent configuration



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to