[YARN-108] FSDownload can create cache directories with the wrong permissions

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 0.23.3, 2.0.0-alpha
• Fix Version/s: 2.0.2-alpha, 0.23.4
• Component/s: nodemanager
• Assignee: Jason Darrell Lowe
• Reporter: Jason Darrell Lowe
• Created: 17/Sep/12 19:26
• Updated: 11/Oct/12 17:48
• Resolved: 17/Sep/12 21:15

Description

When the cluster is configured with a restrictive umask, e.g.: fs.permissions.umask-mode=0077, the nodemanager can end up creating directory entries in the public cache with the wrong permissions. The permissions can end up where only the nodemanager user can access files in the public cache, preventing jobs from running properly.

Issue Links

• is related to: YARN-88 DefaultContainerExecutor can fail to set proper permissions
• relates to: YARN-87 NM ResourceLocalizationService does not set permissions of local cache directories