You are viewing a plain text version of this content. The canonical link for it is here.
Posted to mapreduce-issues@hadoop.apache.org by "Jonathan Hung (JIRA)" <ji...@apache.org> on 2017/03/09 23:32:38 UTC
[jira] [Resolved] (MAPREDUCE-6860) User intermediate-done-dir
permissions should use history file permissions configuration
[ https://issues.apache.org/jira/browse/MAPREDUCE-6860?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jonathan Hung resolved MAPREDUCE-6860.
--------------------------------------
Resolution: Not A Bug
> User intermediate-done-dir permissions should use history file permissions configuration
> ----------------------------------------------------------------------------------------
>
> Key: MAPREDUCE-6860
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-6860
> Project: Hadoop Map/Reduce
> Issue Type: Bug
> Reporter: Jonathan Hung
>
> Currently {{JobHistoryEventHandler}} creates the user intermediate-done-dir directory here: {noformat} doneDirPrefixPath =
> FileContext.getFileContext(conf).makeQualified(new Path(userDoneDirStr));
> mkdir(doneDirFS, doneDirPrefixPath, new FsPermission(
> JobHistoryUtils.HISTORY_INTERMEDIATE_USER_DIR_PERMISSIONS));{noformat} which is hardcoded to 770. But the summary, history, and conf files under this user dir are configurable via {{mapreduce.jobhistory.intermediate-done-dir.file.permission}}. So if the configured permissions has read/write/execute permissions for "other" users, they will still not have access to these files due to the 770 permission on the user dir.
> I see two options here:
> # Reuse {{mapreduce.jobhistory.intermediate-done-dir.file.permission}} as the permissions for the user dir
> # Create a new config for the user dir permissions, using 770 as the default
> The latter makes more sense to me.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
---------------------------------------------------------------------
To unsubscribe, e-mail: mapreduce-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: mapreduce-issues-help@hadoop.apache.org