[ 
https://issues.apache.org/jira/browse/FLINK-5818?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15876111#comment-15876111
 ] 

ASF GitHub Bot commented on FLINK-5818:
---------------------------------------

Github user greghogan commented on the issue:

    https://github.com/apache/flink/pull/3335
  
    @WangTaoTheTonic there is no reason for Flink to support a feature which 
already has proper implementations in a lower layer. Every configuration option 
adds to users' cognitive load and increases the odds of misconfiguration and/or 
security vulnerabilities. Apart from our discussion, as noted by @StephanEwen 
if you wish to add this feature then it should be discussed first on the 
mailing list.


> change checkpoint dir permission to 700 for security reason
> -----------------------------------------------------------
>
>                 Key: FLINK-5818
>                 URL: https://issues.apache.org/jira/browse/FLINK-5818
>             Project: Flink
>          Issue Type: Sub-task
>          Components: Security, State Backends, Checkpointing
>            Reporter: Tao Wang
>
> Now checkpoint directory is made w/o specified permission, so it is easy for 
> another user to delete or read files under it, which will cause restore 
> failure or information leak.
> It's better to lower it down to 700.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to