Bug 615492
| Summary: | starter hooks, HOOK_UPDATE_JOB_INFO and HOOK_JOB_EXIT not run as job owner | ||
|---|---|---|---|
| Product: | Red Hat Enterprise MRG | Reporter: | Matthew Farrellee <matt> |
| Component: | condor | Assignee: | Matthew Farrellee <matt> |
| Status: | CLOSED ERRATA | QA Contact: | Tomas Rusnak <trusnak> |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | 1.2 | CC: | fnadge, ltoscano, trusnak |
| Target Milestone: | 1.3 | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: |
Previously, hooks that ran by the starter did not have the proper user privileges. With this update, all hooks are run with the job submit user privileges.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2010-10-14 16:09:02 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Matthew Farrellee
2010-07-16 20:09:54 UTC
Note: make sure /tmp/hook-priv.log has chmod a+rw and is created before the job is submitted https://condor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1510 Built post 7.4.4-0.4 Reproduced on: $CondorVersion: 7.4.4 Jun 30 2010 BuildID: RH-7.4.4-0.4.el5 PRE-RELEASE $ $CondorPlatform: I386-LINUX_RHEL5 $ Results: /opt/hook-privs/hook_prepare.sh -uid=500(test) gid=500(test) groups=500(test) context=root:system_r:unconfined_execmem_t /opt/hook-privs/hook_update_job_info.sh -uid=64(condor) gid=64(condor) groups=500(test) context=root:system_r:unconfined_execmem_t /opt/hook-privs/hook_job_exit.sh -uid=64(condor) gid=64(condor) groups=500(test) context=root:system_r:unconfined_execmem_t Tested on:
$CondorVersion: 7.4.4 Aug 5 2010 BuildID: RH-7.4.4-0.8.el4 PRE-RELEASE $
$CondorPlatform: X86_64-LINUX_RHEL4 $
$CondorVersion: 7.4.4 Aug 5 2010 BuildID: RH-7.4.4-0.8.el4 PRE-RELEASE $
$CondorPlatform: I386-LINUX_RHEL4 $
$CondorVersion: 7.4.4 Aug 5 2010 BuildID: RH-7.4.4-0.8.el5 PRE-RELEASE $
$CondorPlatform: X86_64-LINUX_RHEL5 $
$CondorVersion: 7.4.4 Aug 5 2010 BuildID: RH-7.4.4-0.8.el5 PRE-RELEASE $
$CondorPlatform: I386-LINUX_RHEL5 $
/opt/hook-privs/hook_prepare.sh -uid=500(test) gid=500(test) groups=500(test) context=root:system_r:unconfined_execmem_t
/opt/hook-privs/hook_job_exit.sh -uid=500(test) gid=500(test) groups=500(test) context=root:system_r:unconfined_execmem_t
All hooks runs under job submit user priviledges, now.
>>> VERIFIED
Technical note added. If any revisions are required, please edit the "Technical Notes" field
accordingly. All revisions will be proofread by the Engineering Content Services team.
New Contents:
Previously, hooks that ran by the starter didn't have the proper user privileges. With this update, all hooks run under job submit user privileges, now.
Technical note updated. If any revisions are required, please edit the "Technical Notes" field
accordingly. All revisions will be proofread by the Engineering Content Services team.
Diffed Contents:
@@ -1 +1 @@
-Previously, hooks that ran by the starter didn't have the proper user privileges. With this update, all hooks run under job submit user privileges, now.+Previously, hooks that ran by the starter did not have the proper user privileges. With this update, all hooks are run with the job submit user privileges.
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHSA-2010-0773.html |