[
https://issues.apache.org/jira/browse/STORM-1368?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15133260#comment-15133260
]
ASF GitHub Bot commented on STORM-1368:
---------------------------------------
GitHub user zhuoliu opened a pull request:
https://github.com/apache/storm/pull/1078
[STORM-1368] change heapdump file permissions so that UI download wil…
Change heapdump file permissions so that UI download wil work in secure
clusters.
a. For automatically generated heapdump files by system
b. For heapdump generated by user from UI
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/zhuoliu/storm 1368
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/storm/pull/1078.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #1078
----
----
> For secure cluster, heapdump file lacks of group read permissions for UI
> download
> ---------------------------------------------------------------------------------
>
> Key: STORM-1368
> URL: https://issues.apache.org/jira/browse/STORM-1368
> Project: Apache Storm
> Issue Type: Bug
> Components: storm-core
> Environment: Secure Storm (runAsUser)
> Reporter: Zhuo Liu
> Assignee: Zhuo Liu
> Priority: Minor
>
> In Secure storm, Jstack, gc and other log files have read permission for
> group. However, heapdump generated from OOM or User Dynamic Profiling has no
> read permissions for group user because JVM hard-coded it in this way.
> HTTP ERROR: 500
> Problem accessing
> /download/Penguin-151202-234121-19-1449099695%2F6701%2Frecording-28103-20151203-184734.bin.
> Reason:
> Server Error
> We need to fix it to enable user to download heapdump from UI.
> -rw------- 1 zhuol gstorm 3664982 Dec 3 19:37
> /home/y/var/storm/workers-artifacts/wc2-38-1449171210/6702/java_pid24691.hprof
> -rw-r----- 1 zhuol gstorm 7597 Dec 3 19:37
> /home/y/var/storm/workers-artifacts/wc2-38-14491712
> {code}
> 4373 // create binary file, rewriting existing file if required
> 4374 int os::create_binary_file(const char* path, bool rewrite_existing) {
> 4375 int oflags = O_WRONLY | O_CREAT;
> 4376 if (!rewrite_existing) {
> 4377 oflags |= O_EXCL;
> 4378 }
> 4379 return ::open64(path, oflags, S_IREAD | S_IWRITE);
> 4380 }
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
