[
https://issues.apache.org/jira/browse/STORM-1368?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Zhuo Liu updated STORM-1368:
----------------------------
Summary: For secure cluster, heapdump file lacks of group read permissions
for UI download (was: For secure cluster, headdump file lacks of group read
permissions for UI download)
> For secure cluster, heapdump file lacks of group read permissions for UI
> download
> ---------------------------------------------------------------------------------
>
> Key: STORM-1368
> URL: https://issues.apache.org/jira/browse/STORM-1368
> Project: Apache Storm
> Issue Type: Bug
> Components: storm-core
> Environment: Secure Storm (runAsUser)
> Reporter: Zhuo Liu
> Assignee: Zhuo Liu
> Priority: Minor
>
> In Secure storm, Jstack, gc and other log files have read permission for
> group. However, heapdump generated from OOM or User Dynamic Profiling has no
> read permissions for group user because JVM hard-coded it in this way.
> HTTP ERROR: 500
> Problem accessing
> /download/Penguin-151202-234121-19-1449099695%2F6701%2Frecording-28103-20151203-184734.bin.
> Reason:
> Server Error
> We need to fix it to enable user to download heapdump from UI.
> -rw------- 1 zhuol gstorm 3664982 Dec 3 19:37
> /home/y/var/storm/workers-artifacts/wc2-38-1449171210/6702/java_pid24691.hprof
> -rw-r----- 1 zhuol gstorm 7597 Dec 3 19:37
> /home/y/var/storm/workers-artifacts/wc2-38-14491712
> {code}
> 4373 // create binary file, rewriting existing file if required
> 4374 int os::create_binary_file(const char* path, bool rewrite_existing) {
> 4375 int oflags = O_WRONLY | O_CREAT;
> 4376 if (!rewrite_existing) {
> 4377 oflags |= O_EXCL;
> 4378 }
> 4379 return ::open64(path, oflags, S_IREAD | S_IWRITE);
> 4380 }
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
