Uploaded image for project: 'Hadoop YARN'
  1. Hadoop YARN
  2. YARN-47 [Umbrella] Security issues in YARN
  3. YARN-62

AM should not be able to abuse container tokens for repetitive container launches

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 0.23.3, 2.0.0-alpha
    • 2.1.0-beta
    • None
    • None
    • Reviewed

    Description

      Clone of YARN-51.

      ApplicationMaster should not be able to store container tokens and use the same set of tokens for repetitive container launches. The possibility of such abuse is there in the current code, for a duration of 1d+10mins, we need to fix this.

      Attachments

        1. YARN-62-20130715.1.patch
          20 kB
          Omkar Vinit Joshi
        2. YARN-62-20130628.patch
          16 kB
          Omkar Vinit Joshi
        3. YARN-62-20130621.1.patch
          17 kB
          Omkar Vinit Joshi
        4. YARN-62-20130621.patch
          17 kB
          Omkar Vinit Joshi

        Issue Links

          blocks

          Bug - A problem which impairs or prevents the functions of the product. YARN-903 DistributedShell throwing Errors in logs after successfull completion

          • Major - Major loss of function.
          • Closed
          duplicates

          Sub-task - The sub-task of the issue YARN-51 [MR-279] [Security] AM should not be able to abuse container tokens for repetitive container launches

          • Blocker - Blocks development and/or testing work, production could not run
          • Closed
          relates to

          Sub-task - The sub-task of the issue YARN-870 Node manager is no longer required to store ContainerToken as it is required only during startContainer call.

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              ojoshi Omkar Vinit Joshi
              vinodkv Vinod Kumar Vavilapalli
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: