[
https://issues.apache.org/jira/browse/HADOOP-6511?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12804878#action_12804878
]
Jakob Homan commented on HADOOP-6511:
-------------------------------------
While 0777 may be a very permissive choice, it is always combined with the
umask to provide a more restrictive permission on the actual file or directory.
So I don't see this as a major problem. Also, this would be a major change to
make at his point, so there would need to be a heavy amount of actual harm from
the current choice to warrant it.
> FsPermission.getDefault choice of 0777 is bad in all cases
> ----------------------------------------------------------
>
> Key: HADOOP-6511
> URL: https://issues.apache.org/jira/browse/HADOOP-6511
> Project: Hadoop Common
> Issue Type: Bug
> Components: fs
> Affects Versions: 0.20.1
> Environment: hadoop 20.1, java 1.6.0_17, Fedora
> Reporter: robert Cook
>
> /** Get the default permission. */
> 227 public static FsPermission getDefault() {
> 228 return new FsPermission((short)00777);
> 229 }
> setting any data file to execute-others is bad security under all
> circumstances
> should be 664 or 644
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
