[ 
https://issues.apache.org/jira/browse/HIVE-4470?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13721192#comment-13721192
 ] 

Gunther Hagleitner commented on HIVE-4470:
------------------------------------------

That is an awesome attack. :-) 

I thought there's already some black list for certain vars in HiveConf for this 
case. I'm hoping security enabled/disabled is in that list.
                
> HS2 should disable local query execution
> ----------------------------------------
>
>                 Key: HIVE-4470
>                 URL: https://issues.apache.org/jira/browse/HIVE-4470
>             Project: Hive
>          Issue Type: Bug
>          Components: HiveServer2
>            Reporter: Thejas M Nair
>
> Hive can run queries in local mode (instead of using a cluster), if the size 
> is small. This happens when "hive.exec.mode.local.auto" is set to true.
> This would affect the stability of the hive server2 node, if you have heavy 
> query processing happening on it. Bugs in udfs triggered by a bad record can 
> potentially add very heavy load making the server inaccessible. 
> By default, HS2 should set these parameters to disallow local execution or 
> send and error message if user tries to set these.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to