Details
-
Type:
extRequest
-
Status: Closed
-
Priority:
Major
-
Resolution: Done
-
Fix Version/s: 2021
-
Component/s: FIWARE-TECH-HELP
-
Labels:None
-
Sender Email:
-
HD-Chapter:Data
-
HD-Enabler:Cosmos
Description
Hello,
I was working with a coworker on Cosmos (trying to make Hive queries) and
we encounter a security issue.
When we log in to Cosmos, we can only access our own HDFS user space . The
problem come from Hive, any user can list every tables existing in the
cosmos node , and can query them .
We noticed that when my coworker who didn't remember the exact name of his
Hive table launch the command "show table" . He was able to see every
tables from any users that exists in Cosmos . We were a little suspicious ,
so I told him to try to query my own table and it worked. I guess we can
then access any tables on your system.
Have you way to fix that? Is there any configuration to make a tables
private?
Best regards .
–
Guillaume Jourdain.
_______________________________________________
Fiware-lab-help mailing list
Fiware-lab-help@lists.fi-ware.org
https://lists.fi-ware.org/listinfo/fiware-lab-help
[Created via e-mail received from: Guillaume Jourdain <guillaume.jourdain@4planet.eu>]
Activity
| Transition | Time In Source Status | Execution Times | Last Executer | Last Execution Date | |||||
|---|---|---|---|---|---|---|---|---|---|
|
1h 30m | 1 | Francisco Romero | 13/May/15 12:08 PM | |||||
|
4m 54s | 1 | Francisco Romero | 13/May/15 12:13 PM | |||||
|
106d 3h 47m | 1 | Francisco Romero | 27/Aug/15 4:00 PM |
