[jira] [Commented] (CASSANDRA-15099) Debian 10 buster: init file require PID file to be owned by root

2019-07-23 Thread Holger Schramm (JIRA)


[ 
https://issues.apache.org/jira/browse/CASSANDRA-15099?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16891248#comment-16891248
 ] 

Holger Schramm commented on CASSANDRA-15099:


This won't work because the error message after the given change would be
{quote}start-stop-daemon: matching on world-writable pidfile 
/var/run/cassandra/cassandra.pid is insecure{quote}

So here is a working and tested fix:
{code}
@@ -210,10 +210,12 @@
 if [ "x$JVM_ON_OUT_OF_MEMORY_ERROR_OPT" != "x" ]; then
 exec $NUMACTL "$JAVA" $JVM_OPTS "$JVM_ON_OUT_OF_MEMORY_ERROR_OPT" 
$cassandra_parms -cp "$CLASSPATH" $props "$class" <&- &
 [ ! -z "$pidpath" ] && printf "%d" $! > "$pidpath"
+chmod 664 "$pidpath"
 true
 else
 exec $NUMACTL "$JAVA" $JVM_OPTS $cassandra_parms -cp "$CLASSPATH" 
$props "$class" <&- &
 [ ! -z "$pidpath" ] && printf "%d" $! > "$pidpath"
+chmod 664 "$pidpath"
 true
 fi
 fi
{code}

> Debian 10 buster: init file require PID file to be owned by root
> 
>
> Key: CASSANDRA-15099
> URL: https://issues.apache.org/jira/browse/CASSANDRA-15099
> Project: Cassandra
>  Issue Type: Bug
>  Components: Packaging
>Reporter: Yury Vidineev
>Priority: Normal
>
> Restarting Cassandra: cassandrastart-stop-daemon: matching only on non-root 
> pidfile /var/run/cassandra/cassandra.pid is insecure
>  failed!



--
This message was sent by Atlassian JIRA
(v7.6.14#76016)

-
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org



[jira] [Commented] (CASSANDRA-15099) Debian 10 buster: init file require PID file to be owned by root

2019-04-24 Thread Yury Vidineev (JIRA)


[ 
https://issues.apache.org/jira/browse/CASSANDRA-15099?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16825499#comment-16825499
 ] 

Yury Vidineev commented on CASSANDRA-15099:
---

Looks like fix is easy

 

18a19
> USER=cassandra
101c102,103
< start-stop-daemon -K -p "$PIDFILE" -R TERM/30/KILL/5 >/dev/null
---
> 
> start-stop-daemon -K -p "$PIDFILE" -R TERM/30/KILL/5 >/dev/null --user 
>$USER

> Debian 10 buster: init file require PID file to be owned by root
> 
>
> Key: CASSANDRA-15099
> URL: https://issues.apache.org/jira/browse/CASSANDRA-15099
> Project: Cassandra
>  Issue Type: Bug
>  Components: Packaging
>Reporter: Yury Vidineev
>Priority: Normal
>
> Restarting Cassandra: cassandrastart-stop-daemon: matching only on non-root 
> pidfile /var/run/cassandra/cassandra.pid is insecure
>  failed!



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

-
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org