[GE users] Any reason not to have all user's workstations as submit hosts?

jlb jlb at salilab.org
Mon Apr 12 21:40:19 BST 2010


On Mon, 12 Apr 2010 at 1:30pm, bdbaddog wrote

> 2) There are security issues, based on a workstation being rooted and
> the user assuming another user's identity and then submitting jobs
> into the cluster with those rights (which can be somewhat mediated by
> the use of CSP, at some administrative overhead cost)
>
> Is that a reasonable summary?

Not quite.  As Ben pointed out, it's wouldn't be overly difficult for 
someone without root to hack up an SGE client which would allow him or her 
to submit jobs as any valid SGE user.  Properly administered CSP can help 
with that.

-- 
Joshua Baker-LePain
QB3 Shared Cluster Sysadmin
UCSF

------------------------------------------------------
http://gridengine.sunsource.net/ds/viewMessage.do?dsForumId=38&dsMessageId=253176

To unsubscribe from this discussion, e-mail: [users-unsubscribe at gridengine.sunsource.net].



More information about the gridengine-users mailing list