[torqueusers] no ruserok check if the job is submitted from submit/compute node

Garrick Staples garrick at clusterresources.com
Wed Apr 11 13:02:34 MDT 2007


On Thu, Apr 05, 2007 at 04:59:25AM +0530, Rajiv Chittajallu alleged:
> Hi,
> 
> I can am able to run a job as any other user if I submit the job from a
> submit host even if it's not allowed in .rhosts. 
> 
> site_check_user_map() from src/lib/Libsite/site_check_u.c doesn't check if the 
> submitting user is same as executing user if the job is submitted from a
> submit/compute node. (compute node if allow_node_submit=true)
> 
> This creates a problem if we have a setup where users are allowed to submit
> their jobs thru only thru a set of submit hosts. 

Does anyone have a patch to fix this issue yet?



More information about the torqueusers mailing list