[ 
https://issues.apache.org/jira/browse/STORM-1368?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15145186#comment-15145186
 ] 

ASF GitHub Bot commented on STORM-1368:
---------------------------------------

Github user revans2 commented on the pull request:

    https://github.com/apache/storm/pull/1078#issuecomment-183466471
  
    This breaks windows by default, and is only needed when security is turned 
on.  Why don't we have the logviewer + worker_launcher change the permissions 
instead of using the odd, and I would say scary, feature to change the 
permissions.


> For secure cluster, heapdump file lacks of group read permissions for UI 
> download
> ---------------------------------------------------------------------------------
>
>                 Key: STORM-1368
>                 URL: https://issues.apache.org/jira/browse/STORM-1368
>             Project: Apache Storm
>          Issue Type: Bug
>          Components: storm-core
>         Environment: Secure Storm (runAsUser)
>            Reporter: Zhuo Liu
>            Assignee: Zhuo Liu
>            Priority: Minor
>
> In Secure storm, Jstack, gc and other log files have read permission for 
> group. However, heapdump generated from OOM or User Dynamic Profiling has no 
> read permissions for group user because JVM hard-coded it in this way. 
> HTTP ERROR: 500
> Problem accessing 
> /download/Penguin-151202-234121-19-1449099695%2F6701%2Frecording-28103-20151203-184734.bin.
>  Reason:
> Server Error
> We need to fix it to enable user to download heapdump from UI.
> -rw------- 1 zhuol  gstorm 3664982 Dec  3 19:37 
> /home/y/var/storm/workers-artifacts/wc2-38-1449171210/6702/java_pid24691.hprof
> -rw-r----- 1 zhuol  gstorm    7597 Dec  3 19:37 
> /home/y/var/storm/workers-artifacts/wc2-38-14491712 
> {code}
> 4373 // create binary file, rewriting existing file if required
>  4374 int os::create_binary_file(const char* path, bool rewrite_existing) {
>  4375   int oflags = O_WRONLY | O_CREAT;
>  4376   if (!rewrite_existing) {
>  4377     oflags |= O_EXCL;
>  4378   }
>  4379   return ::open64(path, oflags, S_IREAD | S_IWRITE);
>  4380 }
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to