[ 
https://issues.apache.org/jira/browse/YARN-9132?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16727024#comment-16727024
 ] 

Hudson commented on YARN-9132:
------------------------------

SUCCESS: Integrated in Jenkins build Hadoop-trunk-Commit #15652 (See 
[https://builds.apache.org/job/Hadoop-trunk-Commit/15652/])
YARN-9132. Added file permission check for auxiliary services manifest (eyang: 
rev ea724181d66ebe3c2cc7ed071948e9bc463bf223)
* (edit) 
hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-nodemanager/src/test/java/org/apache/hadoop/yarn/server/nodemanager/containermanager/TestAuxServices.java
* (edit) 
hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-nodemanager/src/main/java/org/apache/hadoop/yarn/server/nodemanager/containermanager/AuxServices.java


> Add file permission check for auxiliary services manifest file
> --------------------------------------------------------------
>
>                 Key: YARN-9132
>                 URL: https://issues.apache.org/jira/browse/YARN-9132
>             Project: Hadoop YARN
>          Issue Type: Sub-task
>            Reporter: Eric Yang
>            Assignee: Billie Rinaldi
>            Priority: Major
>         Attachments: YARN-9132.1.patch, YARN-9132.2.patch, YARN-9132.3.patch
>
>
> The manifest file in HDFS must be owned by YARN admin or YARN service user 
> only.  This check helps to prevent loading of malware into node manager JVM.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org

Reply via email to