ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Vitaly Brodetskyi (JIRA)" <j...@apache.org>
Subject [jira] [Created] (AMBARI-11983) yarn acl related properties are open to everyone (*) for secure cluster
Date Wed, 17 Jun 2015 18:22:01 GMT
Vitaly Brodetskyi created AMBARI-11983:
------------------------------------------

             Summary: yarn acl related properties are open to everyone (*) for secure cluster
                 Key: AMBARI-11983
                 URL: https://issues.apache.org/jira/browse/AMBARI-11983
             Project: Ambari
          Issue Type: Bug
          Components: ambari-server
    Affects Versions: 2.1.0
            Reporter: Vitaly Brodetskyi
            Assignee: Vitaly Brodetskyi
            Priority: Blocker
             Fix For: 2.1.0


In capacity-scheduler.xml, the followings are set by default and it is too open for secure
cluster:
{noformat}
<property>
<name>yarn.scheduler.capacity.root.acl_administer_queue</name>
<value>*</value>
</property>
<property>
<name>yarn.scheduler.capacity.root.default.acl_administer_jobs</name>
<value>*</value>
</property>
<property>
<name>yarn.scheduler.capacity.root.default.acl_submit_applications</name>
<value>*</value>
</property>
{noformat}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message