[ 
https://issues.apache.org/jira/browse/YARN-2587?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Remus Rusanu updated YARN-2587:
-------------------------------
    Attachment: YARN-2587.1.patch

1.patch fixes the issue by adding an explicit parameter for the target jar 
working dir (ie. implicit dir to be added to relative paths), separated from 
the jar creation working dir (ie. where the jar will be created)

> Windows Secure Container Executor: classpath in the job classpath-jar is 
> referencing NM nmPrivate files
> -------------------------------------------------------------------------------------------------------
>
>                 Key: YARN-2587
>                 URL: https://issues.apache.org/jira/browse/YARN-2587
>             Project: Hadoop YARN
>          Issue Type: Sub-task
>          Components: nodemanager
>            Reporter: Remus Rusanu
>            Assignee: Remus Rusanu
>              Labels: security, windows
>         Attachments: YARN-2587.1.patch
>
>
> The classpath-jar is referencing nmPrivate files:
> {code}
> Manifest-Version: 1.0
> Class-Path: file:/c:/Hadoop/Data/Hadoop/local/usercache/HadoopUser/app
>  cache/application_1411394968079_0006/container_1411394968079_0006_01_ 000003 
> file:/c:/hadoop/hadoop-2.4.1-SNAPSHOT/etc/hadoop/ file:/c:/had 
> oop/hadoop-2.4.1-SNAPSHOT/share/hadoop/common/hadoop-common-3.0.0-SNA 
> PSHOT-tests.jar file:/c:/hadoop/hadoop-2.4.1-SNAPSHOT/share/hadoop/co
> ...
> file:/c:/Hadoop/Data/Hadoop/local
>  /nmPrivate/application_1411394968079_0006/container_1411394968079_000 
> 6_01_000003/job.jar/job.jar file:/c:/Hadoop/Data/Hadoop/local/nmPriva
>  te/application_1411394968079_0006/container_1411394968079_0006_01_000 
> 003/job.jar/classes/
> {code}
> This is not allowed in the WSCE enviornment, the container has no read 
> privileges on the nmPrivate paths. Besides that particular jar is copied over 
> into the user appcache.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to