Gergely Farkas created IMPALA-13895:
---------------------------------------
Summary: KRB5RCACHEDIR env var should be taken into account when
validating replay cache dir permissions
Key: IMPALA-13895
URL: https://issues.apache.org/jira/browse/IMPALA-13895
Project: IMPALA
Issue Type: Bug
Reporter: Gergely Farkas
Impala validates the permissions of _/var/tmp_ directory here:
[https://github.com/apache/impala/blob/32836eab4a42541e44d95435f815a5d0cf9d3b24/be/src/rpc/authentication.cc#L1220#L1220]
_/var/tmp_ directory is the default directory for the Kerberos replay cache,
which can be overridden via the _KRB5RCACHEDIR_ env variable. The validation
should take into account whether the replay cache dir is overridden or not, and
if so, the appropriate directory should be validated.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
