[Fiware-lab-help] Security problem with Hive

[Guillaume Jourdain]

Hello,

I was working with a coworker on Cosmos (trying to make Hive queries) and
we encounter a security issue.

When we log in to Cosmos, we can only access our own HDFS user space . The
problem come from Hive, any user can list every tables existing in the
cosmos node , and can query them .

We noticed that when my coworker who didn't remember the exact name of his
Hive table launch the command "show table" . He was able to see every
tables from any users that exists in Cosmos . We were a little suspicious ,
so I told him to try to query my own table and it worked. I guess we can
then access any tables on your system.

Have you way to fix that? Is there any configuration to make a tables
private?

Best regards .

-- 
Guillaume Jourdain.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/fiware-lab-help/attachments/20150513/eae4a366/attachment.html>