[AMBARI-23282] Ambari should not set world-readable permissions for atlas-application.properties file

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.6.0
• Fix Version/s: 2.7.0
• Component/s: ambari-server
• Labels: pull-request-available security
• Assignee: Sandor Molnar
• Reporter: Sandor Molnar
• Created: 19/Mar/18 14:25
• Updated: 24/Mar/18 10:52
• Resolved: 24/Mar/18 10:52

Description

Atlas uses the atlas-application.properties file and a clear-text-password can be found there. Therefore, OS permissions should be set to just allowing the atlas user to access it, but ambari resets them every time, making it not possible to restrict world-read access to the file.

Issue Links

• links to: GitHub Pull Request #703