[
https://issues.apache.org/jira/browse/MESOS-2199?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14617240#comment-14617240
]
Ian Downes commented on MESOS-2199:
-----------------------------------
I have my build directory under my home directory and I do not want {{nobody}}
(or anybody else) to have access to it.
{noformat}
[root@hostname build]# stat /home/idownes
File: `/home/idownes'
Size: 4096 Blocks: 8 IO Block: 4096 directory
Device: 801h/2049d Inode: 22807083 Links: 11
Access: (0700/drwx------) Uid: (13118/ idownes) Gid: ( 1500/employee)
Access: 2015-07-06 22:51:35.829848943 +0000
Modify: 2015-07-06 21:58:32.348041134 +0000
Change: 2015-07-06 21:58:32.348041134 +0000
{noformat}
My home directory is {{0700}} so naturally {{nobody}} does not have access:
{noformat}
[root@hostname build]# su -s /bin/sh nobody -c "ls /home/idownes"
ls: cannot open directory /home/idownes: Permission denied
{noformat}
I think it's flawed to require global read access for the build directory...
> Failing test: SlaveTest.ROOT_RunTaskWithCommandInfoWithUser
> -----------------------------------------------------------
>
> Key: MESOS-2199
> URL: https://issues.apache.org/jira/browse/MESOS-2199
> Project: Mesos
> Issue Type: Bug
> Components: test
> Reporter: Ian Downes
> Assignee: haosdent
> Labels: mesosphere
>
> Appears that running the executor as {{nobody}} is not supported.
> [~nnielsen] can you take a look?
> Executor log:
> {noformat}
> [root@hostname build]# cat
> /tmp/SlaveTest_ROOT_RunTaskWithCommandInfoWithUser_cxF1dY/slaves/20141219-005206-2081170186-60487-11862-S0/frameworks/20141219-005206-2081170186-60
> 487-11862-0000/executors/1/runs/latest/std*
> sh: /home/idownes/workspace/mesos/build/src/mesos-executor: Permission denied
> {noformat}
> Test output:
> {noformat}
> [==========] Running 1 test from 1 test case.
> [----------] Global test environment set-up.
> [----------] 1 test from SlaveTest
> [ RUN ] SlaveTest.ROOT_RunTaskWithCommandInfoWithUser
> ../../src/tests/slave_tests.cpp:680: Failure
> Value of: statusRunning.get().state()
> Actual: TASK_FAILED
> Expected: TASK_RUNNING
> ../../src/tests/slave_tests.cpp:682: Failure
> Failed to wait 10secs for statusFinished
> ../../src/tests/slave_tests.cpp:673: Failure
> Actual function call count doesn't match EXPECT_CALL(sched,
> statusUpdate(&driver, _))...
> Expected: to be called twice
> Actual: called once - unsatisfied and active
> [ FAILED ] SlaveTest.ROOT_RunTaskWithCommandInfoWithUser (10641 ms)
> [----------] 1 test from SlaveTest (10641 ms total)
> [----------] Global test environment tear-down
> [==========] 1 test from 1 test case ran. (10658 ms total)
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
