hadoop-yarn-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Remus Rusanu (JIRA)" <j...@apache.org>
Subject [jira] [Created] (YARN-2553) Windows Secure Container Executor: assign PROCESS_TERMINATE privilege to NM on created containers
Date Mon, 15 Sep 2014 13:43:33 GMT
Remus Rusanu created YARN-2553:
----------------------------------

             Summary: Windows Secure Container Executor: assign PROCESS_TERMINATE privilege
to NM on created containers
                 Key: YARN-2553
                 URL: https://issues.apache.org/jira/browse/YARN-2553
             Project: Hadoop YARN
          Issue Type: Sub-task
          Components: nodemanager
            Reporter: Remus Rusanu
            Assignee: Remus Rusanu


In order to open a job handle with JOB_OBJECT_TERMINATE access, the caller must have PROCESS_TERMINATE
access on the handle of each process in the job (MSDN http://msdn.microsoft.com/en-us/library/windows/desktop/ms686709(v=vs.85).aspx)
.

hadoopwinutilsvc process should explicitly grant PROCESS_TERMINATE access to NM account on
the newly started container process. I hope this gets inherited...



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message