[
https://issues.apache.org/jira/browse/AMBARI-23282?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Robert Levas updated AMBARI-23282:
----------------------------------
Resolution: Fixed
Status: Resolved (was: Patch Available)
> Ambari should not set world-readable permissions for
> atlas-application.properties file
> --------------------------------------------------------------------------------------
>
> Key: AMBARI-23282
> URL: https://issues.apache.org/jira/browse/AMBARI-23282
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 2.6.0
> Reporter: Sandor Molnar
> Assignee: Sandor Molnar
> Priority: Minor
> Labels: pull-request-available, security
> Fix For: 2.7.0
>
> Time Spent: 2h
> Remaining Estimate: 0h
>
> Atlas uses the atlas-application.properties file and a clear-text-password
> can be found there. Therefore, OS permissions should be set to just allowing
> the atlas user to access it, but ambari resets them every time, making it not
> possible to restrict world-read access to the file.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
