You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Jakob Homan (JIRA)" <ji...@apache.org> on 2010/01/26 04:54:34 UTC
[jira] Commented: (HADOOP-6511) FsPermission.getDefault choice of
0777 is bad in all cases
[ https://issues.apache.org/jira/browse/HADOOP-6511?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12804878#action_12804878 ]
Jakob Homan commented on HADOOP-6511:
-------------------------------------
While 0777 may be a very permissive choice, it is always combined with the umask to provide a more restrictive permission on the actual file or directory. So I don't see this as a major problem. Also, this would be a major change to make at his point, so there would need to be a heavy amount of actual harm from the current choice to warrant it.
> FsPermission.getDefault choice of 0777 is bad in all cases
> ----------------------------------------------------------
>
> Key: HADOOP-6511
> URL: https://issues.apache.org/jira/browse/HADOOP-6511
> Project: Hadoop Common
> Issue Type: Bug
> Components: fs
> Affects Versions: 0.20.1
> Environment: hadoop 20.1, java 1.6.0_17, Fedora
> Reporter: robert Cook
>
> /** Get the default permission. */
> 227 public static FsPermission getDefault() {
> 228 return new FsPermission((short)00777);
> 229 }
> setting any data file to execute-others is bad security under all circumstances
> should be 664 or 644
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.