[YARN-2551] Windows Secure Cotnainer Executor: Add checks to validate that the wsce-site.xml is write restricted to Administrators only - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Sub-task
Status: Resolved
Priority: Major
Resolution: Implemented
Affects Version/s: None
Fix Version/s: None
Component/s: nodemanager
Labels:
- security
- windows
- wsce

Description

The wsce-site.xml containes the impersonate.allowed and impersonate.denied keys that restrict/control the users that can be impersonated by the WSCE containers. The impersonation frameworks in winutils should validate that only Administrators have write control on this file.

This is similar to how LCE is validating that only root has write permissions on container-executor.cfg file on secure Linux clusters.

Attachments

- Sort By Name
- Sort By Date
- Ascending
- Descending

YARN-2551.1.patch
22/Sep/14 12:09
5 kB
Remus Rusanu

Activity

People

Assignee:: Remus Rusanu

Reporter:: Remus Rusanu

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 15/Sep/14 13:28

Updated:: 22/Sep/14 12:09

Resolved:: 22/Sep/14 12:09