[ 
https://issues.apache.org/jira/browse/YARN-732?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Vinod Kumar Vavilapalli updated YARN-732:
-----------------------------------------
    Fix Version/s:     (was: trunk-win)

> YARN support for container isolation on Windows
> -----------------------------------------------
>
>                 Key: YARN-732
>                 URL: https://issues.apache.org/jira/browse/YARN-732
>             Project: Hadoop YARN
>          Issue Type: New Feature
>          Components: nodemanager
>    Affects Versions: trunk-win
>            Reporter: Kyle Leckie
>              Labels: security
>         Attachments: winutils.diff
>
>
> There is no ContainerExecutor on windows that can launch containers in a 
> manner that creates:
> 1) container isolation
> 2) container execution with reduced rights
> I am working on patches that will add the ability to launch containers in a 
> process with a reduced access token. 
> Update: After examining several approaches I have settled on launching the 
> task as a domain user. I have attached the current winutils diff which is a 
> work in progress. 
> Work remaining:
> - Create isolated desktop for task processes.
> - Set integrity of spawned processed to low.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to