Zhuo Liu created STORM-1368:
-------------------------------
Summary: For secure cluster, headdump file lacks of group read
permissions for UI download
Key: STORM-1368
URL: https://issues.apache.org/jira/browse/STORM-1368
Project: Apache Storm
Issue Type: Bug
Components: storm-core
Environment: Secure Storm (runAsUser)
Reporter: Zhuo Liu
Assignee: Zhuo Liu
Priority: Minor
In Secure storm, Jstack, gc and other log files have read permission for group.
However, heapdump generated from OOM or User Dynamic Profiling has no read
permissions for group user because JVM hard-coded it in this way.
HTTP ERROR: 500
Problem accessing
/download/Penguin-151202-234121-19-1449099695%2F6701%2Frecording-28103-20151203-184734.bin.
Reason:
Server Error
We need to fix it to enable user to download heapdump from UI.
-rw------- 1 zhuol gstorm 3664982 Dec 3 19:37
/home/y/var/storm/workers-artifacts/wc2-38-1449171210/6702/java_pid24691.hprof
-rw-r----- 1 zhuol gstorm 7597 Dec 3 19:37
/home/y/var/storm/workers-artifacts/wc2-38-14491712
{code}
4373 // create binary file, rewriting existing file if required
4374 int os::create_binary_file(const char* path, bool rewrite_existing) {
4375 int oflags = O_WRONLY | O_CREAT;
4376 if (!rewrite_existing) {
4377 oflags |= O_EXCL;
4378 }
4379 return ::open64(path, oflags, S_IREAD | S_IWRITE);
4380 }
{code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
