Apache ORC, as a file format and associated tools, needs access to the local file system so that it can read the requested files.
Is there any reason these ‘requested files’ cannot be accessed via current interfaces such as home or removable-media? Bind mounting the files into a user’s home folder is one way to continue using strict confinement while allowing access to arbitrary files.
@omalley Please, could you answer the question from @lucyllewy as it would help us understand is classic confinement is really required.
@omalley - ping (please answer open questions)
@omalley - ping again (please answer open questions). We can’t proceed until you answer.
Denying this request due to lack of response from the requester. Please feel free to reopen in the future.