[gridengine users] ignore hostname checking for submit hosts?

Reuti reuti at staff.uni-marburg.de
Wed Jun 15 21:02:26 UTC 2011


Am 15.06.2011 um 22:33 schrieb Vadim Gutnik:

> On Wed, Jun 15, 2011 at 12:48 PM, Reuti <reuti at staff.uni-marburg.de> wrote:
>> Am 15.06.2011 um 21:41 schrieb Vadim Gutnik:
>> 
>>>> Correct. But it's a safety measure. As everyone can become any user on his local machine, he can easily kill/submit jobs for someone else or as an admin reconfigure SGE.
>>> 
>>> I'm ok with checking admin machines. For the latter, the convenience
>>> of being able to run jobs from more machines far outweighs
>>> the risk of malicious users. (If you don't trust the users, you've
>>> lost anyway: they could overwrite other users's script files, for
>>> example.)
>> 
>> How? Do you allow just an NFS mount of the working directories? I would go for FUSE using sshfs for remote machines' mount.
> 
> This is a side discussion. I'm not qualified or, honestly, interested
> in finding holes in SGE security. I can say that
> in our case, this "feature" doesn't actually increase security, so I'd
> like to disable the check. Is that possible?

AFAIK not on the command line, you will have to change the source.

-- Reuti


>>> In any case, I understand that risk. How would I disable that check
>>> for submit hosts?
>>> 
>>>  Vadim
> 





More information about the users mailing list