[
https://issues.apache.org/jira/browse/STORM-485?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14121609#comment-14121609
]
ASF GitHub Bot commented on STORM-485:
--------------------------------------
Github user harshach commented on the pull request:
https://github.com/apache/incubator-storm/pull/248#issuecomment-54514303
@d2r I think following need to be added to
storm-dist/binary/src/main/assembly/binary.xml
<file>
<source>${project.basedir}/../../logback/worker.xml</source>
<outputDirectory>/logback</outputDirectory>
</file>
> Workers should not access shared log files
> ------------------------------------------
>
> Key: STORM-485
> URL: https://issues.apache.org/jira/browse/STORM-485
> Project: Apache Storm (Incubating)
> Issue Type: Bug
> Reporter: Derek Dagit
> Assignee: Derek Dagit
> Labels: security
>
> Because of file system permissions, the logback configuration (currently
> cluster.xml) should not be used when launching workers because permissions of
> system log files (e.g., access.log, metrics.log) should conflict with the
> user:group of the worker processes.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)