[YARN-5280] Allow YARN containers to run with Java Security Manager

• Type: New Feature
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.6.4
• Fix Version/s: 3.0.0-alpha4
• Component/s: nodemanager, yarn
• Labels: oct16-medium
• Target Version/s: 3.0.0-alpha4
• Hadoop Flags: Reviewed
• Flags: Patch
• Assignee: Greg Phillips
• Reporter: Greg Phillips
• Created: 21/Jun/16 11:47
• Updated: 02/Mar/17 02:12
• Resolved: 02/Mar/17 01:32

Description

YARN applications have the ability to perform privileged actions which have the potential to add instability into the cluster. The Java Security Manager can be used to prevent users from running privileged actions while still allowing their core data processing use cases.
Introduce a YARN flag which will allow a Hadoop administrator to enable the Java Security Manager for user code, while still providing complete permissions to core Hadoop libraries.