[AMBARI-19902] Ambari scripts have 777 permission which is a major security concern (change came from 2.4.x)

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.4.0
• Fix Version/s: 2.5.0
• Component/s: ambari-agent, ambari-server
• Assignee: Vitaly Brodetskyi
• Reporter: Vitaly Brodetskyi
• Created: 07/Feb/17 20:36
• Updated: 08/Feb/17 21:25
• Resolved: 08/Feb/17 20:45

Description

If we look at the below output these files have 777 perms :

[root@h1 ~]# ll /usr/lib/python2.6/site-packages/ambari_agent/HostCleanup.py 
-rwxrwxrwx. 1 root root 22471 Nov 23 07:40 /usr/lib/python2.6/site-packages/ambari_agent/HostCleanup.py 

[root@h1 ~]# ll /var/lib/ambari-server/resources/scripts/configs.sh 
-rwxrwxrwx. 1 root root 9801 Nov 23 07:27 /var/lib/ambari-server/resources/scripts/configs.sh 

Issue Links

• links to: review request