Github user vanzin commented on the pull request:
https://github.com/apache/spark/pull/4509#issuecomment-74139464
That's ok because the temp dir would be created underneath one of the "root
local dirs" created by the `getOrCreateLocalRootDirs` method here:
https://github.com/apache/spark/pull/4509/files#diff-d239aee594001f8391676e1047a0381eR698
So the top-most directory would have the right permissions (700 in the
usual case, or whatever permissions Yarn sets when talking about Yarn
containers). That's enough to prevent access to the underlying tree.
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscr...@spark.apache.org
For additional commands, e-mail: reviews-h...@spark.apache.org
