[jira] [Commented] (CASSANDRA-15099) Debian 10 buster: init file require PID file to be owned by root

["Holger Schramm (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CASSANDRA-15099?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16891248#comment-16891248 ] 

Holger Schramm commented on CASSANDRA-15099:
--------------------------------------------

This won't work because the error message after the given change would be
{quote}start-stop-daemon: matching on world-writable pidfile /var/run/cassandra/cassandra.pid is insecure{quote}

So here is a working and tested fix:
{code}
@@ -210,10 +210,12 @@
         if [ "x$JVM_ON_OUT_OF_MEMORY_ERROR_OPT" != "x" ]; then
             exec $NUMACTL "$JAVA" $JVM_OPTS "$JVM_ON_OUT_OF_MEMORY_ERROR_OPT" $cassandra_parms -cp "$CLASSPATH" $props "$class" <&- &
             [ ! -z "$pidpath" ] && printf "%d" $! > "$pidpath"
+            chmod 664 "$pidpath"
             true
         else
             exec $NUMACTL "$JAVA" $JVM_OPTS $cassandra_parms -cp "$CLASSPATH" $props "$class" <&- &
             [ ! -z "$pidpath" ] && printf "%d" $! > "$pidpath"
+            chmod 664 "$pidpath"
             true
         fi
     fi
{code}

> Debian 10 buster: init file require PID file to be owned by root
> ----------------------------------------------------------------
>
>                 Key: CASSANDRA-15099
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-15099
>             Project: Cassandra
>          Issue Type: Bug
>          Components: Packaging
>            Reporter: Yury Vidineev
>            Priority: Normal
>
> Restarting Cassandra: cassandrastart-stop-daemon: matching only on non-root pidfile /var/run/cassandra/cassandra.pid is insecure
>  failed!



--
This message was sent by Atlassian JIRA
(v7.6.14#76016)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org