[OOZIE-3403] [fluent-job] Workflow definition is stored in an insecure place on client host

• Type: Bug
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 5.1.0
• Component/s: fluent-job
• Assignee: Unassigned
• Reporter: Andras Piros
• Created: 13/Dec/18 13:47
• Updated: 13/Dec/18 13:47

Description

When OozieCLI is called with job -validatejar and –-verbose options, the resulting workflow.xml is stored in an insecure place: /tmp on the host computer.

To reduce world readability, it's required that the resulting workflow.xml be stored in the currend working directory with rights only readable to the caller where OozieCLI has just been called.

Since this information is also available via normal OozieCLI call job -definition, it's considered a minor issue.