From 286c9c3327f1daf8e71fd730c34d4791e325f842 Mon Sep 17 00:00:00 2001 From: skysiders <64545691+skysiders@users.noreply.github.com> Date: Fri, 3 Jun 2022 06:28:22 +0800 Subject: [PATCH] HBASE-26985 check permission for SecureBulkLoadManager (#4379) Signed-off-by: Viraj Jasani --- .../hadoop/hbase/regionserver/SecureBulkLoadManager.java | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java b/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java index d45f5cf54d5..181893400bd 100644 --- a/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java +++ b/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java @@ -125,6 +125,10 @@ public class SecureBulkLoadManager { } if (!fs.exists(baseStagingDir)) { fs.mkdirs(baseStagingDir, PERM_HIDDEN); + if (!PERM_HIDDEN.equals(PERM_HIDDEN.applyUMask(FsPermission.getUMask(conf)))) { + LOG.info("Modifying permissions to " + PERM_HIDDEN); + fs.setPermission(baseStagingDir, PERM_HIDDEN); + } } }