Remus Rusanu created YARN-2553:
----------------------------------

             Summary: Windows Secure Container Executor: assign 
PROCESS_TERMINATE privilege to NM on created containers
                 Key: YARN-2553
                 URL: https://issues.apache.org/jira/browse/YARN-2553
             Project: Hadoop YARN
          Issue Type: Sub-task
          Components: nodemanager
            Reporter: Remus Rusanu
            Assignee: Remus Rusanu


In order to open a job handle with JOB_OBJECT_TERMINATE access, the caller must 
have PROCESS_TERMINATE access on the handle of each process in the job (MSDN 
http://msdn.microsoft.com/en-us/library/windows/desktop/ms686709(v=vs.85).aspx) 
.

hadoopwinutilsvc process should explicitly grant PROCESS_TERMINATE access to NM 
account on the newly started container process. I hope this gets inherited...



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to