You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@hbase.apache.org by vj...@apache.org on 2022/06/02 22:29:52 UTC

[hbase] branch branch-2 updated: HBASE-26985 check permission for SecureBulkLoadManager (#4379)

This is an automated email from the ASF dual-hosted git repository.

vjasani pushed a commit to branch branch-2
in repository https://gitbox.apache.org/repos/asf/hbase.git


The following commit(s) were added to refs/heads/branch-2 by this push:
     new 286c9c3327f HBASE-26985 check permission for SecureBulkLoadManager (#4379)
286c9c3327f is described below

commit 286c9c3327f1daf8e71fd730c34d4791e325f842
Author: skysiders <64...@users.noreply.github.com>
AuthorDate: Fri Jun 3 06:28:22 2022 +0800

    HBASE-26985 check permission for SecureBulkLoadManager (#4379)
    
    Signed-off-by: Viraj Jasani <vj...@apache.org>
---
 .../org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java   | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java b/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java
index d45f5cf54d5..181893400bd 100644
--- a/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java
+++ b/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java
@@ -125,6 +125,10 @@ public class SecureBulkLoadManager {
     }
     if (!fs.exists(baseStagingDir)) {
       fs.mkdirs(baseStagingDir, PERM_HIDDEN);
+      if (!PERM_HIDDEN.equals(PERM_HIDDEN.applyUMask(FsPermission.getUMask(conf)))) {
+        LOG.info("Modifying permissions to " + PERM_HIDDEN);
+        fs.setPermission(baseStagingDir, PERM_HIDDEN);
+      }
     }
   }