Mailing-List: contact yarn-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Date: Tue, 20 Sep 2016 19:23:20 +0000 (UTC)
From: "Daniel Templeton (JIRA)" <jira@apache.org>
To: yarn-issues@hadoop.apache.org
Message-ID: <JIRA.13001489.1472594756000.619124.1474399400594@Atlassian.JIRA>
In-Reply-To: <JIRA.13001489.1472594756000@Atlassian.JIRA>
References: <JIRA.13001489.1472594756000@Atlassian.JIRA> <JIRA.13001489.1472594756375@arcas>
Subject: [jira] [Commented] (YARN-5599) Post AM launcher artifacts to ATS
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
archived-at: Tue, 20 Sep 2016 19:23:22 -0000


    [ https://issues.apache.org/jira/browse/YARN-5599?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15507524#comment-15507524 ] 

Daniel Templeton commented on YARN-5599:
----------------------------------------

Looks like the patch adds back the log line in {{createAMContainerLaunchContext()}}, which reintroduces the security vulnerability we were trying to eliminate.  The log line should be dropped altogether.

> Post AM launcher artifacts to ATS
> ---------------------------------
>
>                 Key: YARN-5599
>                 URL: https://issues.apache.org/jira/browse/YARN-5599
>             Project: Hadoop YARN
>          Issue Type: Improvement
>            Reporter: Daniel Templeton
>            Assignee: Rohith Sharma K S
>         Attachments: 0001-YARN-5599.patch
>
>
> To aid in debugging launch failures, it would be valuable to have an application's launch script and logs posted to ATS.  Because the application's command line may contain private credentials or other secure information, access to the data in ATS should be restricted to the job owner, including the at-rest data.
> Along with making the data available through ATS, the configuration parameter introduced in YARN-5549 and the log line that it guards should be removed.


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org