You are viewing a plain text version of this content. The canonical link for it is here.
Posted to yarn-issues@hadoop.apache.org by "Chris Nauroth (Jira)" <ji...@apache.org> on 2023/01/07 19:50:00 UTC

[jira] [Resolved] (YARN-11231) FSDownload set wrong permission in destinationTmp

     [ https://issues.apache.org/jira/browse/YARN-11231?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Chris Nauroth resolved YARN-11231.
----------------------------------
      Assignee: Zhang Dongsheng
    Resolution: Won't Fix

Hello [~skysider]. I noticed you closed pull request [#4629|https://github.com/apache/hadoop/pull/4629]. I assume you are abandoning this change, because 777 would be too dangerous, so I'm also closing this corresponding JIRA issue. (If I misunderstood, and you're still working on something for this, then the issue can be reopened.)

> FSDownload set wrong permission in destinationTmp
> -------------------------------------------------
>
>                 Key: YARN-11231
>                 URL: https://issues.apache.org/jira/browse/YARN-11231
>             Project: Hadoop YARN
>          Issue Type: Bug
>          Components: yarn
>            Reporter: Zhang Dongsheng
>            Assignee: Zhang Dongsheng
>            Priority: Major
>              Labels: pull-request-available
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> FSDownload calls createDir in the call method to create the destinationTmp directory, which is later used as the parent directory to create the directory dFinal, which is used in doAs to perform operations such as path creation and path traversal. doAs cannot determine the user's identity, so there is a problem with setting 755 permissions for destinationTmp here, I think it should be set to 777 permissions here.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org