[ 
https://issues.apache.org/jira/browse/YARN-8520?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16576597#comment-16576597
 ] 

Shane Kumpf commented on YARN-8520:
-----------------------------------

Thanks for the updated patch, [~eyang]! +1 on the latest patch. I'll commit 
this later today if there is no additional feedback.

 

> Document best practice for user management
> ------------------------------------------
>
>                 Key: YARN-8520
>                 URL: https://issues.apache.org/jira/browse/YARN-8520
>             Project: Hadoop YARN
>          Issue Type: Sub-task
>          Components: documentation, yarn
>            Reporter: Eric Yang
>            Assignee: Eric Yang
>            Priority: Major
>              Labels: Docker
>         Attachments: YARN-8520.001.patch, YARN-8520.002.patch, 
> YARN-8520.003.patch, YARN-8520.004.patch, YARN-8520.005.patch
>
>
> Docker container must have consistent username and groups with host operating 
> system when external mount points are exposed to docker container.  This 
> prevents malicious or unauthorized impersonation to occur.  This task is to 
> document the best practice to ensure user and group membership are consistent 
> across docker containers.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to