[YARN-2458] Add file handling features to the Windows Secure Container Executor LRPC service

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Implemented
• Component/s: nodemanager
• Labels: security windows
• Assignee: Remus Rusanu
• Reporter: Remus Rusanu
• Created: 27/Aug/14 07:29
• Updated: 15/Sep/14 10:05
• Resolved: 15/Sep/14 10:05

Description

In the WSCE design the nodemanager needs to do certain privileged operations like change file ownership to arbitrary users or delete files owned by the task container user after completion of the task. As we want to remove the Administrator privilege requirement from the nodemanager service, we have to move these operations into the privileged LRPC helper service.

Extend the RPC interface to contain methods for change file ownership and manipulate files, add JNI client side and implement the server side. This will piggyback on the existing LRPC service so is not much infrastructure to add (run as service, RPC init, authentictaion and authorization are already solved). It just needs to be implemented.

Issue Links

• is required by: HADOOP-11080 Convert Windows native build in hadoop-common to use CMake.