From 76e92af4c42e65b749286dc7e6fbcfc8eddc2841 Mon Sep 17 00:00:00 2001 From: Akira Ajisaka Date: Tue, 25 May 2021 18:28:09 +0900 Subject: [PATCH] YARN-10770. container-executor permission is wrong in SecureContainer.md. Contributed by Siddharth Ahuja. (cherry picked from commit 1cbcde04f3b025e4c0c844e8bfe8d9007af2be3b) --- .../hadoop-yarn-site/src/site/markdown/SecureContainer.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-site/src/site/markdown/SecureContainer.md b/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-site/src/site/markdown/SecureContainer.md index a66c0421370..511deafb7a0 100644 --- a/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-site/src/site/markdown/SecureContainer.md +++ b/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-site/src/site/markdown/SecureContainer.md @@ -36,7 +36,7 @@ Secure Containers work only in the context of secured YARN clusters. The configured directories for `yarn.nodemanager.local-dirs` and `yarn.nodemanager.log-dirs` must be owned by the configured NodeManager user (`yarn`) and group (`hadoop`). The permission set on these directories must be `drwxr-xr-x`. - The `container-executor` program must be owned by `root` and have the permission set `---sr-s---`. + The `container-executor` program must be owned by `root` and have the permission set `---Sr-s---`. To configure the `NodeManager` to use the `LinuxContainerExecutor` set the following in the **conf/yarn-site.xml**: