[ https://issues.apache.org/jira/browse/STORM-1368?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15145153#comment-15145153 ]
ASF GitHub Bot commented on STORM-1368: --------------------------------------- Github user knusbaum commented on a diff in the pull request: https://github.com/apache/storm/pull/1078#discussion_r52788111 --- Diff: storm-core/src/jvm/org/apache/storm/Config.java --- @@ -231,7 +231,7 @@ /** * Whether we want to display all the resource capacity and scheduled usage on the UI page. - * We suggest to have this variable set if you are using any kind of resource-related scheduler. + * You msut have this variable set if you are using any kind of resource-related scheduler. --- End diff -- msut > For secure cluster, heapdump file lacks of group read permissions for UI > download > --------------------------------------------------------------------------------- > > Key: STORM-1368 > URL: https://issues.apache.org/jira/browse/STORM-1368 > Project: Apache Storm > Issue Type: Bug > Components: storm-core > Environment: Secure Storm (runAsUser) > Reporter: Zhuo Liu > Assignee: Zhuo Liu > Priority: Minor > > In Secure storm, Jstack, gc and other log files have read permission for > group. However, heapdump generated from OOM or User Dynamic Profiling has no > read permissions for group user because JVM hard-coded it in this way. > HTTP ERROR: 500 > Problem accessing > /download/Penguin-151202-234121-19-1449099695%2F6701%2Frecording-28103-20151203-184734.bin. > Reason: > Server Error > We need to fix it to enable user to download heapdump from UI. > -rw------- 1 zhuol gstorm 3664982 Dec 3 19:37 > /home/y/var/storm/workers-artifacts/wc2-38-1449171210/6702/java_pid24691.hprof > -rw-r----- 1 zhuol gstorm 7597 Dec 3 19:37 > /home/y/var/storm/workers-artifacts/wc2-38-14491712 > {code} > 4373 // create binary file, rewriting existing file if required > 4374 int os::create_binary_file(const char* path, bool rewrite_existing) { > 4375 int oflags = O_WRONLY | O_CREAT; > 4376 if (!rewrite_existing) { > 4377 oflags |= O_EXCL; > 4378 } > 4379 return ::open64(path, oflags, S_IREAD | S_IWRITE); > 4380 } > {code} -- This message was sent by Atlassian JIRA (v6.3.4#6332)