hadoop-yarn-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Remus Rusanu (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (YARN-2458) Add file handling features to the Windows Secure Container Executor LRPC service
Date Sun, 31 Aug 2014 14:24:20 GMT

     [ https://issues.apache.org/jira/browse/YARN-2458?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Remus Rusanu updated YARN-2458:
-------------------------------
    Attachment: YARN-2458.1.patch

First pass at the issue, the patch attached works. I will do a second pass to fix some hacks
(move the native method into NativeIO class and handle DLL loading).

> Add file handling features to the Windows Secure Container Executor LRPC service
> --------------------------------------------------------------------------------
>
>                 Key: YARN-2458
>                 URL: https://issues.apache.org/jira/browse/YARN-2458
>             Project: Hadoop YARN
>          Issue Type: Sub-task
>          Components: nodemanager
>            Reporter: Remus Rusanu
>            Assignee: Remus Rusanu
>              Labels: security, windows
>         Attachments: YARN-2458.1.patch
>
>
> In the WSCE design the nodemanager needs to do certain privileged operations like change
file ownership to arbitrary users or delete files owned by the task container user after completion
of the task. As we want to remove the Administrator privilege  requirement from the nodemanager
service, we have to move these operations into the privileged LRPC helper service. 
> Extend the RPC interface to contain methods for change file ownership and manipulate
files, add JNI client side and implement the server side. This will piggyback on the existing
LRPC service so is not much infrastructure to add (run as service, RPC init, authentictaion
and authorization are already solved). It just needs to be implemented.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message