[BIGTOP-1050] Permissions on YARN LCE should be 4754

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Fix Version/s: 1.0.0
• Assignee: Sean Mackrory
• Reporter: Sean Mackrory
• Created: 13/Aug/13 16:18
• Updated: 13/Apr/15 15:11
• Resolved: 13/Apr/15 15:11

Description

The permissions we set for the YARN container executor are not exactly correct and are different from what we used to set for the MRv1 task containers. The requirements for the permissions are as follows:

• Readable/executable by the group
• Not executable by others
• Not writable by others
• Set UID
• Owned by root

I've tested this in YARN and have tested that I can still submit and run jobs successfully with these new permissions. This is somewhat second-hand information, so I'll CC atm in case I've missed any important details or context...