[HADOOP-11415] Local file system on Linux may create files and directories initially with wider permissions than intended.

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: fs
• Labels: security
• Assignee: Unassigned
• Reporter: Chris Nauroth
• Created: 16/Dec/14 23:40
• Updated: 07/Jan/17 01:56

Description

As discussed in HADOOP-11321, the local file system implements file and directory creation as a two-step process: create followed by chmod to set the caller's requested permissions. This causes a brief window in which the new file or directory may have wider permissions than what the caller requested. HADOOP-11321 fixed this specifically for Windows as a side effect of fixing a bug in writing to an SMB share. This issue tracks fixing it specifically for Linux.

Issue Links

• relates to: HADOOP-11321 copyToLocal cannot save a file to an SMB share unless the user has Full Control permissions.