怎样阻止某些合法用户恶意执行一些非法作业呢？flink框架本身能提供哪些保护手段呢？

During a security analysis of Flink, I noticed that Flink allows for remote code execution, is this an issue?

Apache Flink is a framework for executing user-supplied code in clusters. Users can submit code to Flink processes, which will be executed unconditionally, without any attempts to limit what code can run. Starting other processes, establishing network connections or accessing and modifying local files is possible.

Historically, we’ve received numerous remote code execution vulnerability reports, which we had to reject, as this is by design.

We strongly discourage users to expose Flink processes to the public internet. Within company networks or “cloud” accounts, we recommend restricting access to a Flink cluster via appropriate means.

Flink Security文档的说明。这个不是flink框架本身解决的问题，是安全团队和诸如漏扫、威胁检测工具应当完成的工作*来自志愿者整理的flink邮件归档