[
https://issues.apache.org/jira/browse/AMBARI-21970?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16171765#comment-16171765
]
Hadoop QA commented on AMBARI-21970:
------------------------------------
{color:red}-1 overall{color}. Here are the results of testing the latest
attachment
http://issues.apache.org/jira/secure/attachment/12887890/AMBARI-21970.patch
against trunk revision .
{color:green}+1 @author{color}. The patch does not contain any @author
tags.
{color:red}-1 tests included{color}. The patch doesn't appear to include
any new or modified tests.
Please justify why no new tests are needed for this
patch.
Also please list what manual steps were performed to
verify this patch.
{color:green}+1 release audit{color}. The applied patch does not increase
the total number of release audit warnings.
{color:green}+1 javac{color}. The applied patch does not increase the
total number of javac compiler warnings.
{color:green}+1 core tests{color}. The patch passed unit tests in .
Console output:
https://builds.apache.org/job/Ambari-trunk-test-patch/12281//console
This message is automatically generated.
> Enable sticky bit for curl_krb_cache
> ------------------------------------
>
> Key: AMBARI-21970
> URL: https://issues.apache.org/jira/browse/AMBARI-21970
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 2.5.0
> Reporter: Krishnama Raju K
> Assignee: Eugene Chekanskiy
> Priority: Minor
> Attachments: AMBARI-21970.patch
>
>
> In secure environment, we see that "/var/lib/ambari-agent/tmp" has sticky bit
> enabled. Trying to enable such permissions ( sticky bit or any other
> permissions ) for "curl_krb_request.py" is being over written after few
> seconds.
> It is observed that the chmod permissions set in "curl_krb_request.py"
> enforces periodic 0777 as shown in below snippet.
> {code:java}
> curl_krb_cache_path = os.path.join(tmp_dir, "curl_krb_cache")
> if not os.path.exists(curl_krb_cache_path):
> os.makedirs(curl_krb_cache_path)
> os.chmod(curl_krb_cache_path, 0777)
> {code}
> Ref:
> https://github.com/apache/ambari/blob/trunk/ambari-common/src/main/python/resource_management/libraries/functions/curl_krb_request.py
> Hence, code changes need to be done for setting the sticky bit to prevent
> access from users who did not create the specific file.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
