[MAPREDUCE-3175] Yarn httpservers not created with access Control lists

• Type: Sub-task
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 0.23.0
• Fix Version/s: 0.23.0
• Component/s: mrv2
• Target Version/s: 0.23.0
• Assignee: Jonathan Turner Eagles
• Reporter: Thomas Graves
• Created: 12/Oct/11 18:03
• Updated: 15/Nov/11 00:49
• Resolved: 27/Oct/11 06:10

Description

RM, NM, job history, and application master httpservers are not created with access Control lists. I believe this means that anyone can access any of the standard servlets that check to see if the user has administrator access - like /jmx, /stacks, etc and ops has no way to restrict access to these things.

Issue Links

• is blocked by: MAPREDUCE-3104 Implement Application ACLs, Queue ACLs and their interaction
• is blocked by: HADOOP-7764 Allow both ACL list and global path spec filters to HttpServer