[ 
https://issues.apache.org/jira/browse/STORM-1368?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15145153#comment-15145153
 ] 

ASF GitHub Bot commented on STORM-1368:
---------------------------------------

Github user knusbaum commented on a diff in the pull request:

    https://github.com/apache/storm/pull/1078#discussion_r52788111
  
    --- Diff: storm-core/src/jvm/org/apache/storm/Config.java ---
    @@ -231,7 +231,7 @@
     
         /**
          * Whether we want to display all the resource capacity and scheduled 
usage on the UI page.
    -     * We suggest to have this variable set if you are using any kind of 
resource-related scheduler.
    +     * You msut have this variable set if you are using any kind of 
resource-related scheduler.
    --- End diff --
    
    msut


> For secure cluster, heapdump file lacks of group read permissions for UI 
> download
> ---------------------------------------------------------------------------------
>
>                 Key: STORM-1368
>                 URL: https://issues.apache.org/jira/browse/STORM-1368
>             Project: Apache Storm
>          Issue Type: Bug
>          Components: storm-core
>         Environment: Secure Storm (runAsUser)
>            Reporter: Zhuo Liu
>            Assignee: Zhuo Liu
>            Priority: Minor
>
> In Secure storm, Jstack, gc and other log files have read permission for 
> group. However, heapdump generated from OOM or User Dynamic Profiling has no 
> read permissions for group user because JVM hard-coded it in this way. 
> HTTP ERROR: 500
> Problem accessing 
> /download/Penguin-151202-234121-19-1449099695%2F6701%2Frecording-28103-20151203-184734.bin.
>  Reason:
> Server Error
> We need to fix it to enable user to download heapdump from UI.
> -rw------- 1 zhuol  gstorm 3664982 Dec  3 19:37 
> /home/y/var/storm/workers-artifacts/wc2-38-1449171210/6702/java_pid24691.hprof
> -rw-r----- 1 zhuol  gstorm    7597 Dec  3 19:37 
> /home/y/var/storm/workers-artifacts/wc2-38-14491712 
> {code}
> 4373 // create binary file, rewriting existing file if required
>  4374 int os::create_binary_file(const char* path, bool rewrite_existing) {
>  4375   int oflags = O_WRONLY | O_CREAT;
>  4376   if (!rewrite_existing) {
>  4377     oflags |= O_EXCL;
>  4378   }
>  4379   return ::open64(path, oflags, S_IREAD | S_IWRITE);
>  4380 }
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to