[
https://issues.apache.org/jira/browse/YARN-10819?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
lujie updated YARN-10819:
-------------------------
Description:
I have enable security for our cluster, and create three users : yarn, user1,
user2.
I configured the mode of "yarn.nodemanager.log-dirs" as 750 and submit a job
as *user2*, the mode of files are
!image-2021-06-11-14-32-38-351.png!
But i do not want others, like *user1*, see *user2's* logs,
I have fixed on bug about preventing user1 seeing the job infomation of user2
, i.e. https://issues.apache.org/jira/browse/YARN-10555
I think we should have a way to resolve this inconsistent.
was:
I have enable security for our cluster, and create three users : yarn, user1,
user2.
I configured the mode of "yarn.nodemanager.log-dirs" as 750 and submit a job
as *user2*, the mode of files are
!image-2021-06-11-14-32-38-351.png!
But i do not want others, like *user1*, see my logs,
I have fixed on bug about preventing user1 seeing the job infomation of user2
, i.e. https://issues.apache.org/jira/browse/YARN-10555
I think we should have a way to resolve this inconsistent.
> Security Policy of log file is inconsistent
> -------------------------------------------
>
> Key: YARN-10819
> URL: https://issues.apache.org/jira/browse/YARN-10819
> Project: Hadoop YARN
> Issue Type: Bug
> Reporter: lujie
> Priority: Major
> Attachments: image-2021-06-11-14-32-38-351.png
>
>
> I have enable security for our cluster, and create three users : yarn,
> user1, user2.
> I configured the mode of "yarn.nodemanager.log-dirs" as 750 and submit a job
> as *user2*, the mode of files are
> !image-2021-06-11-14-32-38-351.png!
> But i do not want others, like *user1*, see *user2's* logs,
>
> I have fixed on bug about preventing user1 seeing the job infomation of
> user2 , i.e. https://issues.apache.org/jira/browse/YARN-10555
>
> I think we should have a way to resolve this inconsistent.
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
