hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Wei-Chiu Chuang (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-10324) Trash directory in an encryption zone should be pre-created with sticky bit
Date Tue, 26 Apr 2016 23:43:13 GMT

    [ https://issues.apache.org/jira/browse/HDFS-10324?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15259195#comment-15259195
] 

Wei-Chiu Chuang commented on HDFS-10324:
----------------------------------------

It is true that this API is used only in unit tests in Hadoop, but downstream project might
use it. What do we typically consider when changing public API?

> Trash directory in an encryption zone should be pre-created with sticky bit
> ---------------------------------------------------------------------------
>
>                 Key: HDFS-10324
>                 URL: https://issues.apache.org/jira/browse/HDFS-10324
>             Project: Hadoop HDFS
>          Issue Type: Bug
>          Components: encryption
>    Affects Versions: 2.8.0
>         Environment: CDH5.7.0
>            Reporter: Wei-Chiu Chuang
>            Assignee: Wei-Chiu Chuang
>         Attachments: HDFS-10324.001.patch, HDFS-10324.002.patch, HDFS-10324.003.patch
>
>
> We encountered a bug in HDFS-8831:
> After HDFS-8831, a deleted file in an encryption zone is moved to a .Trash subdirectory
within the encryption zone.
> However, if this .Trash subdirectory is not created beforehand, it will be created and
owned by the first user who deleted a file, with permission drwx------. This creates a serious
bug because any other non-privileged user will not be able to delete any files within the
encryption zone, because they do not have the permission to move directories to the trash
directory.
> We should fix this bug, by pre-creating the .Trash directory with sticky bit.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message