[slurm-users] Limit job detail in scontrol without limiting squeue

[Burian, John]

Hello, all,

If a user does something silly like embed confidential information in pathnames, thinking that no one will see it because their directories are protected, that information could be leaked through “scontrol show job=<>”. Pathnames for the job script and output files appear in the scontrol output.

There is a slurm.conf option ‘PrivateData’ that can be used to restrict users from seeing information about jobs belonging to other users. However, when this is enabled, it prevents a user from even seeing that other users have jobs in queue. Is anyone aware of a way to protect the details of jobs reported by scontrol while not hiding the contents of the queue?

Thanks,
John

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.schedmd.com/pipermail/slurm-users/attachments/20210512/334bffba/attachment.htm>