Details
-
Sub-task
-
Status: Closed
-
Major
-
Resolution: Fixed
-
0.23.3, 2.0.0-alpha
-
None
-
None
-
Reviewed
Description
Clone of YARN-51.
ApplicationMaster should not be able to store container tokens and use the same set of tokens for repetitive container launches. The possibility of such abuse is there in the current code, for a duration of 1d+10mins, we need to fix this.
Attachments
Attachments
Issue Links
- blocks
-
YARN-903 DistributedShell throwing Errors in logs after successfull completion
- Closed
- duplicates
-
YARN-51 [MR-279] [Security] AM should not be able to abuse container tokens for repetitive container launches
- Closed
- relates to
-
YARN-870 Node manager is no longer required to store ContainerToken as it is required only during startContainer call.
- Resolved