This is an automated email from the ASF dual-hosted git repository.
yiguolei pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/doris.git
The following commit(s) were added to refs/heads/master by this push:
new e9da7312194 [fix][security]security optimize for executable binary
file doris_cloud access should be restricted (#30944)
e9da7312194 is described below
commit e9da7312194c8badf631d944b14c29293af45e15
Author: Rohit Satardekar <rohitrs1...@yahoo.com>
AuthorDate: Wed Feb 7 19:31:34 2024 +0530
[fix][security]security optimize for executable binary file doris_cloud
access should be restricted (#30944)
Co-authored-by: Rohit Satardekar <rohitrs1...@gmail.com>
---
cloud/script/start.sh | 2 ++
1 file changed, 2 insertions(+)
diff --git a/cloud/script/start.sh b/cloud/script/start.sh
index ecd738938f8..a5c9658aa7f 100644
--- a/cloud/script/start.sh
+++ b/cloud/script/start.sh
@@ -54,6 +54,8 @@ if [[ -f "${DORIS_HOME}/bin/${process}.pid" ]]; then
rm -f "${DORIS_HOME}/bin/${process}.pid"
fi
+chmod 550 "${DORIS_HOME}/lib/doris_cloud"
+
lib_path="${DORIS_HOME}/lib"
bin="${DORIS_HOME}/lib/doris_cloud"
if ldd "${bin}" | grep -Ei 'libfdb_c.*not found' &>/dev/null; then
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@doris.apache.org
For additional commands, e-mail: commits-h...@doris.apache.org
