Vitaly Brodetskyi created AMBARI-11983:
------------------------------------------
Summary: yarn acl related properties are open to everyone (*) for
secure cluster
Key: AMBARI-11983
URL: https://issues.apache.org/jira/browse/AMBARI-11983
Project: Ambari
Issue Type: Bug
Components: ambari-server
Affects Versions: 2.1.0
Reporter: Vitaly Brodetskyi
Assignee: Vitaly Brodetskyi
Priority: Blocker
Fix For: 2.1.0
In capacity-scheduler.xml, the followings are set by default and it is too open
for secure cluster:
{noformat}
<property>
<name>yarn.scheduler.capacity.root.acl_administer_queue</name>
<value>*</value>
</property>
<property>
<name>yarn.scheduler.capacity.root.default.acl_administer_jobs</name>
<value>*</value>
</property>
<property>
<name>yarn.scheduler.capacity.root.default.acl_submit_applications</name>
<value>*</value>
</property>
{noformat}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
