[ https://issues.apache.org/jira/browse/YARN-5280?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15885969#comment-15885969 ]
Greg Phillips edited comment on YARN-5280 at 2/27/17 4:16 PM: -------------------------------------------------------------- [~vvasudev] Thanks for reviewing the patch. The ContainerRuntimeContext is used across all methods in the ContainerRuntime interface: {code:title=ContainerRuntime.java} void prepareContainer(ContainerRuntimeContext ctx) throws ContainerExecutionException; void launchContainer(ContainerRuntimeContext ctx) throws ContainerExecutionException; void signalContainer(ContainerRuntimeContext ctx) throws ContainerExecutionException; void reapContainer(ContainerRuntimeContext ctx) throws ContainerExecutionException; {code} The goal was to conform to the existing ContainerRuntime interface, though it definitely could make sense to merge the various Context's in a separate ticket. was (Author: gphillips): [~vvasudev] Thanks for reviewing the patch. The ContainerRuntimeContext is used across all methods in the ContainerRuntime interface: {code:title=ContainerRuntime.java} void prepareContainer(ContainerRuntimeContext ctx) throws ContainerExecutionException; void launchContainer(ContainerRuntimeContext ctx) throws ContainerExecutionException; void signalContainer(ContainerRuntimeContext ctx) throws ContainerExecutionException; void reapContainer(ContainerRuntimeContext ctx) throws ContainerExecutionException; {code} The goal was to conform to the existing ContainerRuntime interface, though it definitely could make sense to merge the various Context's in a separate patch. > Allow YARN containers to run with Java Security Manager > ------------------------------------------------------- > > Key: YARN-5280 > URL: https://issues.apache.org/jira/browse/YARN-5280 > Project: Hadoop YARN > Issue Type: New Feature > Components: nodemanager, yarn > Affects Versions: 2.6.4 > Reporter: Greg Phillips > Assignee: Greg Phillips > Priority: Minor > Labels: oct16-medium > Attachments: YARN-5280.001.patch, YARN-5280.002.patch, > YARN-5280.003.patch, YARN-5280.004.patch, YARN-5280.005.patch, > YARN-5280.006.patch, YARN-5280.007.patch, YARN-5280.008.patch, > YARN-5280.patch, YARNContainerSandbox.pdf > > > YARN applications have the ability to perform privileged actions which have > the potential to add instability into the cluster. The Java Security Manager > can be used to prevent users from running privileged actions while still > allowing their core data processing use cases. > Introduce a YARN flag which will allow a Hadoop administrator to enable the > Java Security Manager for user code, while still providing complete > permissions to core Hadoop libraries. -- This message was sent by Atlassian JIRA (v6.3.15#6346) --------------------------------------------------------------------- To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org