[AMBARI-12782] Handle file permissions for jceks file in umask 027

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.1
• Fix Version/s: 2.1.2
• Assignee: Gautam Borad
• Reporter: Gautam Borad
• Created: 17/Aug/15 08:43
• Updated: 20/Aug/15 18:33
• Resolved: 18/Aug/15 17:27

Description

1. Handle : cd_access='a' for /etc/ranger/ (when jceks files are created)
   • Audit to DB fails in a case if Ranger is not installed on same host as that of component host.
   • For example Ranger is running on Host1 and Hiveserver2 is running on Host2. Then as /etc/ranger/<repository_name> gets created and has owner as hive user. However, due to umask setting /etc/ranger gets 750 permission with root:root as owner:group.
   • Due to this when hive user tries to read the jceks file to generate audits to DB - it gets permission denied error.
2. rectifying ranger_audit_db passwd to be used while creating jceks for Ranger Audit DB

Issue Links

• links to: Review Request