Apache/hbase
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

HBASE-18512, Region Server will abort with IllegalStateException if HDFS umask has limited scope

Browse Source 
Signed-off-by: tedyu <yuzhihong@gmail.com>
This commit is contained in:
Pankaj Kumar 2017-08-14 21:27:45 +08:00 committed by tedyu
parent 3ed765257e
commit d7c6a0bf43
1 changed files with 16 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/SecureBulkLoadEndpoint.java
View File

@ -149,15 +149,26 @@ public class SecureBulkLoadEndpoint extends SecureBulkLoadService
fs = baseStagingDir.getFileSystem(conf);
if (!fs.exists(baseStagingDir)) {
fs.mkdirs(baseStagingDir, PERM_HIDDEN);
} else {
fs.setPermission(baseStagingDir, PERM_HIDDEN);
}
//no sticky bit in hadoop-1.0, making directory nonempty so it never gets erased
fs.mkdirs(new Path(baseStagingDir,"DONOTERASE"), PERM_HIDDEN);
FileStatus status = fs.getFileStatus(baseStagingDir);
if(status == null) {
if (status == null) {
throw new IllegalStateException("Failed to create staging directory");
}
// If HDFS UMASK value has limited scope then staging directory permission may not be 711
// after creation, so we should set staging directory permission explicitly.
if (!status.getPermission().equals(PERM_HIDDEN)) {
fs.setPermission(baseStagingDir, PERM_HIDDEN);
status = fs.getFileStatus(baseStagingDir);
}
// no sticky bit in hadoop-1.0, making directory nonempty so it never gets erased
Path doNotEraseDir = new Path(baseStagingDir, "DONOTERASE");
if (!fs.exists(doNotEraseDir)) {
fs.mkdirs(doNotEraseDir, PERM_HIDDEN);
fs.setPermission(doNotEraseDir, PERM_HIDDEN);
}
String scheme = fs.getScheme().toLowerCase();
if (!fsSet.contains(scheme) && !status.getPermission().equals(PERM_HIDDEN)) {
throw new IllegalStateException(