Hello, all,

If a user does something silly like embed confidential information in 
pathnames, thinking that no one will see it because their directories are 
protected, that information could be leaked through “scontrol show job=<>”. 
Pathnames for the job script and output files appear in the scontrol output.

There is a slurm.conf option ‘PrivateData’ that can be used to restrict users 
from seeing information about jobs belonging to other users. However, when this 
is enabled, it prevents a user from even seeing that other users have jobs in 
queue. Is anyone aware of a way to protect the details of jobs reported by 
scontrol while not hiding the contents of the queue?

Thanks,
John

Reply via email to