HADOOP-12888 Shell to disable bash and setsid support when running under JVM security manager (Costin Leau via stevel)

This commit is contained in:
Steve Loughran 2016-03-16 14:31:19 +00:00
parent ab03266831
commit 1463400aad
1 changed files with 9 additions and 1 deletions

View File

@ -717,6 +717,10 @@ public abstract class Shell {
} catch (IOException ioe) {
LOG.warn("Bash is not supported by the OS", ioe);
supported = false;
} catch (SecurityException se) {
LOG.info("Bash execution is not allowed by the JVM " +
"security manager.Considering it not supported.");
supported = false;
}
return supported;
@ -744,7 +748,11 @@ public abstract class Shell {
} catch (IOException ioe) {
LOG.debug("setsid is not available on this machine. So not using it.");
setsidSupported = false;
} catch (Error err) {
} catch (SecurityException se) {
LOG.debug("setsid is not allowed to run by the JVM "+
"security manager. So not using it.");
setsidSupported = false;
} catch (Error err) {
if (err.getMessage() != null
&& err.getMessage().contains("posix_spawn is not " +
"a supported process launch mechanism")