ddanielr opened a new pull request, #4900:
URL: https://github.com/apache/accumulo/pull/4900

   JLine creates a `.so` and a `.so.lck` file when interactively prompting the 
user for input.
   The `.so` file needs execute permissions to function correctly. 
   
   ```
   jlinenative-3.25.1-164e07369eff3578-libjlinenative.so
   jlinenative-3.25.1-164e07369eff3578-libjlinenative.so.lck
   ```
   
   However, these files go in the directory set by `java.io.tmpdir` which is 
typically `/tmp` or `/var/tmp` and is commonly set with `noexec` to conform 
with security best practices.  
   
https://www.stigviewer.com/stig/red_hat_enterprise_linux_8/2023-12-01/finding/V-230513
   
   This prevents Jline from functioning correctly and breaks the shell. 
   
   Instead, we can use accumulo's `/run` directory for these temp files as it 
is used for ephemeral `.pid` files already.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to