[
https://issues.apache.org/jira/browse/MESOS-6504?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Gilbert Song updated MESOS-6504:
--------------------------------
Sprint: Mesosphere Sprint 47, Mesosphere Sprint 48, Mesosphere Sprint 50
(was: Mesosphere Sprint 47, Mesosphere Sprint 48, Mesosphere Sprint 49)
> Use 'geteuid()' for the root privileges check.
> ----------------------------------------------
>
> Key: MESOS-6504
> URL: https://issues.apache.org/jira/browse/MESOS-6504
> Project: Mesos
> Issue Type: Bug
> Components: isolation
> Reporter: Gilbert Song
> Assignee: Gilbert Song
> Labels: backend, isolator, mesosphere, user
>
> Currently, parts of code in Mesos check the root privileges using os::user()
> to compare to "root", which is not sufficient, since it compares the real
> user. When people change the mesos binary by 'setuid root', the process may
> not have the right permission to execute.
> We should check the effective user id instead in our code.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
