[ACCUMULO-2806] Accumulo init should ensure wals and tables are not world readable

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.5.0, 1.5.1, 1.6.0
• Fix Version/s: 1.9.0
• Assignee: Michael Miller
• Reporter: Sean Busbey
• Created: 14/May/14 17:12
• Updated: 23/Apr/19 16:13
• Resolved: 20/Mar/17 18:16

Description

Just did an init on a new 1.6.1-SNAP cluster, and noticed the following permissions:

dfs -ls /
Found 4 items
drwxr-xr-x   - accumulo supergroup          0 2014-05-14 09:48 /accumulo
drwxr-xr-x   - hdfs     supergroup          0 2014-05-14 08:10 /jobtracker
drwxrwxrwx   - hdfs     supergroup          0 2014-05-14 08:10 /tmp
drwxr-xr-x   - hdfs     supergroup          0 2014-05-14 09:48 /user
-bash-4.1$ hdfs dfs -ls /accumulo
Found 3 items
drwxr-xr-x   - accumulo supergroup          0 2014-05-14 09:55 /accumulo/instance_id
drwxr-xr-x   - accumulo supergroup          0 2014-05-14 09:55 /accumulo/tables
drwxr-xr-x   - accumulo supergroup          0 2014-05-14 09:55 /accumulo/version

I previously set up /accumulo as 755, under the understanding that clients need access to /accumulo/instance_id

things to fix

1. make init chmod tables and wals to 700, as a defensive measure to avoid data leaks
2. maybe also make sure if the trash is enabled that our user directory is also not world readable
3. If clients don't need access to instance_id, include a check that the data dir is not world readable

Workaround: manually change permissions after init

Issue Links

• relates to: ACCUMULO-2076 Make it easier to connect to acccumulo
• links to: GitHub Pull Request #222