Remus Rusanu created YARN-2553:

             Summary: Windows Secure Container Executor: assign 
PROCESS_TERMINATE privilege to NM on created containers
                 Key: YARN-2553
             Project: Hadoop YARN
          Issue Type: Sub-task
          Components: nodemanager
            Reporter: Remus Rusanu
            Assignee: Remus Rusanu

In order to open a job handle with JOB_OBJECT_TERMINATE access, the caller must 
have PROCESS_TERMINATE access on the handle of each process in the job (MSDN 

hadoopwinutilsvc process should explicitly grant PROCESS_TERMINATE access to NM 
account on the newly started container process. I hope this gets inherited...

This message was sent by Atlassian JIRA

Reply via email to