[
https://issues.apache.org/jira/browse/HADOOP-4490?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12674504#action_12674504
]
Arun C Murthy commented on HADOOP-4490:
---------------------------------------
bq. If it is felt that this should be per TaskController, then we can easily
move this to the TaskController API.
On second thoughts - I'd go there right-away, since it means that we don't need
to open it up to 777 for mapred.local.dir if the DefaultTaskController is in
effect.
bq. Introduce a TaskController.initializeJob [...]
+1
bq. Modify TaskController.launchTaskJVM to set up permissions [...]
+1
bq. Modify TaskController.initializeTask to set up permissions for [...]
+1
bq. Modify DistributedCache.localizeCache to set up permissions for the
localized files. [...]
+1
> Map and Reduce tasks should run as the user who submitted the job
> -----------------------------------------------------------------
>
> Key: HADOOP-4490
> URL: https://issues.apache.org/jira/browse/HADOOP-4490
> Project: Hadoop Core
> Issue Type: Sub-task
> Components: mapred, security
> Reporter: Arun C Murthy
> Assignee: Hemanth Yamijala
> Attachments: hadoop-4490-design.pdf, HADOOP-4490.patch,
> HADOOP-4490.patch, HADOOP-4490.patch, HADOOP-4490.patch, HADOOP-4490.patch,
> HADOOP-4490.patch, HADOOP-4490.patch
>
>
> Currently the TaskTracker spawns the map/reduce tasks, resulting in them
> running as the user who started the TaskTracker.
> For security and accounting purposes the tasks should be run as the job-owner.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
