tanvipenumudy opened a new pull request, #4620:
URL: https://github.com/apache/ozone/pull/4620

   ## What changes were proposed in this pull request?
   
   The CLI command: `ozone sh token get` does a few things wrong:
   
   1. Writes to `/tmp/ozone.token` and the permissions allow another user to 
read it.
   2. A second user cannot run the command as the `/tmp` folder does not allow 
another user to delete the file.
   
   We will require a fix that would:
   
   1. Require the user to enter the path to which the token will be written.
   2. Set the permission for the file to be readable by only the user who owns 
the file.
   
   ## What is the link to the Apache JIRA
   
   https://issues.apache.org/jira/browse/HDDS-8495
   
   ## How was this patch tested?
   
   The patch has been tested over a cluster with the basic Ozone services 
running.
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to