hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jakob Homan (JIRA)" <j...@apache.org>
Subject [jira] Commented: (HADOOP-6511) FsPermission.getDefault choice of 0777 is bad in all cases
Date Tue, 26 Jan 2010 03:54:34 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-6511?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12804878#action_12804878
] 

Jakob Homan commented on HADOOP-6511:
-------------------------------------

While 0777 may be a very permissive choice, it is always combined with the umask to provide
a more restrictive permission on the actual file or directory. So I don't see this as a major
problem.  Also, this would be a major change to make at his point, so there would need to
be a heavy amount of actual harm from the current choice to warrant it.

> FsPermission.getDefault choice of 0777 is bad in all cases
> ----------------------------------------------------------
>
>                 Key: HADOOP-6511
>                 URL: https://issues.apache.org/jira/browse/HADOOP-6511
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: fs
>    Affects Versions: 0.20.1
>         Environment: hadoop 20.1, java 1.6.0_17, Fedora
>            Reporter: robert Cook
>
>   /** Get the default permission. */
> 227	  public static FsPermission getDefault() {
> 228	    return new FsPermission((short)00777);
> 229	  }
> setting any data file to execute-others is bad security under all circumstances
> should be 664 or 644

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message