[
https://issues.apache.org/jira/browse/HADOOP-10237?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13911729#comment-13911729
]
Owen O'Malley commented on HADOOP-10237:
----------------------------------------
You should pass the permission in to the create call instead of the doing it as
a second step. Otherwise, you have a race condition where the data is visible
to outsiders until the chmod happens.
> JavaKeyStoreProvider needs to set keystore permissions properly
> ---------------------------------------------------------------
>
> Key: HADOOP-10237
> URL: https://issues.apache.org/jira/browse/HADOOP-10237
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Reporter: Larry McCay
> Assignee: Larry McCay
> Attachments: HADOOP-10237.patch
>
>
> In order protect access to the created keystores permissions should initially
> be set to 700 by the JavaKeyStoreProvider. Subsequent permission changes can
> then be done using FS.
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
