Remus Rusanu commented on YARN-1972:

[~vinodkv] btw I could also go the opposite direction, leave the user file 
cache creation with the DCE/WCE and remove it from the localizer initDirs. This 
would require the LCE to be modified to create these dirs before launching the 

> Implement secure Windows Container Executor
> -------------------------------------------
>                 Key: YARN-1972
>                 URL: https://issues.apache.org/jira/browse/YARN-1972
>             Project: Hadoop YARN
>          Issue Type: Improvement
>          Components: nodemanager
>            Reporter: Remus Rusanu
>            Assignee: Remus Rusanu
>              Labels: security, windows
>         Attachments: YARN-1972.1.patch
> This work item represents the Java side changes required to implement a 
> secure windows container executor, based on the YARN-1063 changes on 
> native/winutils side. 
> Necessary changes include leveraging the winutils task createas to launch the 
> container process as the required user and a secure localizer (launch 
> localization as a separate process running as the container user).

This message was sent by Atlassian JIRA

Reply via email to