Omkar Vinit Joshi created MAPREDUCE-5208:
--------------------------------------------

             Summary: SpillRecord and ShuffleHandler should use SecureIOUtils 
for reading index file and map output
                 Key: MAPREDUCE-5208
                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-5208
             Project: Hadoop Map/Reduce
          Issue Type: Bug
            Reporter: Omkar Vinit Joshi
            Assignee: Omkar Vinit Joshi


ShuffleHandler (map output file) and SpillRecord (index file) are reading file 
using unsecured input stream. There exists a possibility for symlink attack. 
related to YARN-578 . Creating this issue to track map reduce changes.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to