[gridengine users] ignore hostname checking for submit hosts?

Vadim Gutnik gutnik at gmail.com
Wed Jun 15 20:33:32 UTC 2011


On Wed, Jun 15, 2011 at 12:48 PM, Reuti <reuti at staff.uni-marburg.de> wrote:
> Am 15.06.2011 um 21:41 schrieb Vadim Gutnik:
>
>>> Correct. But it's a safety measure. As everyone can become any user on his local machine, he can easily kill/submit jobs for someone else or as an admin reconfigure SGE.
>>
>> I'm ok with checking admin machines. For the latter, the convenience
>> of being able to run jobs from more machines far outweighs
>> the risk of malicious users. (If you don't trust the users, you've
>> lost anyway: they could overwrite other users's script files, for
>> example.)
>
> How? Do you allow just an NFS mount of the working directories? I would go for FUSE using sshfs for remote machines' mount.

This is a side discussion. I'm not qualified or, honestly, interested
in finding holes in SGE security. I can say that
in our case, this "feature" doesn't actually increase security, so I'd
like to disable the check. Is that possible?

>> In any case, I understand that risk. How would I disable that check
>> for submit hosts?
>>
>>  Vadim




More information about the users mailing list