[jira] [Updated] (CASSANDRA-12641) False positive when checking if the user is root
[ https://issues.apache.org/jira/browse/CASSANDRA-12641?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] C. Scott Andreas updated CASSANDRA-12641: - Component/s: Lifecycle > False positive when checking if the user is root > > > Key: CASSANDRA-12641 > URL: https://issues.apache.org/jira/browse/CASSANDRA-12641 > Project: Cassandra > Issue Type: Bug > Components: Lifecycle >Reporter: Matt Wringe >Priority: Minor > > Cassandra will fail to start if it thinks its running as the Root user. It > does so by checking if the users uid or gid is 0: > https://github.com/apache/cassandra/blob/trunk/bin/cassandra#L269 > The problem is that a gid of 0 doesn't really mean anything in terms of > security. It does not mean that the user has root privileges or any other > special permissions. > If you are running in an environment where the group id is 0 (such as certain > containerized environments) then you can run into this false positive and > have to add the -R option to by pass the check. > It would be nice to be able to just run Cassandra in these environments > without having to add the -R option. -- This message was sent by Atlassian JIRA (v7.6.3#76005) - To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org For additional commands, e-mail: commits-h...@cassandra.apache.org
[jira] [Updated] (CASSANDRA-12641) False positive when checking if the user is root
[ https://issues.apache.org/jira/browse/CASSANDRA-12641?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Sylvain Lebresne updated CASSANDRA-12641: - Priority: Minor (was: Major) > False positive when checking if the user is root > > > Key: CASSANDRA-12641 > URL: https://issues.apache.org/jira/browse/CASSANDRA-12641 > Project: Cassandra > Issue Type: Bug >Reporter: Matt Wringe >Priority: Minor > > Cassandra will fail to start if it thinks its running as the Root user. It > does so by checking if the users uid or gid is 0: > https://github.com/apache/cassandra/blob/trunk/bin/cassandra#L269 > The problem is that a gid of 0 doesn't really mean anything in terms of > security. It does not mean that the user has root privileges or any other > special permissions. > If you are running in an environment where the group id is 0 (such as certain > containerized environments) then you can run into this false positive and > have to add the -R option to by pass the check. > It would be nice to be able to just run Cassandra in these environments > without having to add the -R option. -- This message was sent by Atlassian JIRA (v6.3.4#6332)
