You are viewing a plain text version of this content. The canonical link for it is here.
Posted to mapreduce-issues@hadoop.apache.org by "Wilfred Spiegelenburg (JIRA)" <ji...@apache.org> on 2018/12/03 22:13:00 UTC
[jira] [Commented] (MAPREDUCE-7159) FrameworkUploader: ensure
proper permissions of generated framework tar.gz if restrictive umask is
used
[ https://issues.apache.org/jira/browse/MAPREDUCE-7159?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16707882#comment-16707882 ]
Wilfred Spiegelenburg commented on MAPREDUCE-7159:
--------------------------------------------------
Thank you [~pbacsko]
I have two questions:
# you currently have fixed just the distributed filesystem. Does this same issue not happen if we do not have a distributed file system and directly create the stream?
# In this case there are restrictive settings on the file itself, what f there are restrictive settings in the path? That case does not seem to be handled at all as the only thing we check in {{validateTargetPath}} is the start of the URI. We need to have at least traversal rights on the whole path.
> FrameworkUploader: ensure proper permissions of generated framework tar.gz if restrictive umask is used
> -------------------------------------------------------------------------------------------------------
>
> Key: MAPREDUCE-7159
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-7159
> Project: Hadoop Map/Reduce
> Issue Type: Bug
> Components: mrv2
> Affects Versions: 3.1.1
> Reporter: Peter Bacsko
> Assignee: Peter Bacsko
> Priority: Major
> Attachments: MAPREDUCE-7159-001.patch, MAPREDUCE-7159-002.patch, MAPREDUCE-7159-003.patch
>
>
> Using certain umask values (like 027) makes files unreadable to "others". This causes problems if the FrameworkUploader (https://github.com/apache/hadoop/blob/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-uploader/src/main/java/org/apache/hadoop/mapred/uploader/FrameworkUploader.java) is used - it's necessary that the compressed MR framework is readable by all users, otherwise they won't be able to run MR jobs.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: mapreduce-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: mapreduce-issues-help@hadoop.apache.org