[
https://issues.apache.org/jira/browse/HBASE-28431?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17889533#comment-17889533
]
Istvan Toth commented on HBASE-28431:
-------------------------------------
Adding that to the assembly would open up us again for additional CVEs, so I
don't think that's a good idea.
Are those files needed on every node, or only on the client node ?
> Cleaning up binary assemblies and diagnostic tools
> --------------------------------------------------
>
> Key: HBASE-28431
> URL: https://issues.apache.org/jira/browse/HBASE-28431
> Project: HBase
> Issue Type: Umbrella
> Affects Versions: 3.0.0-beta-1
> Reporter: Istvan Toth
> Priority: Major
>
> As discussed on the mailing list, the current binary assembly has several
> problems.
> The discussed improvements:
> * Provide assembly versions without transitive Hadoop dependencies
> * Remove test JARs and their dependencies from the assemblies
> * Move useful diagnostic tools into the runtime jars
> See [https://lists.apache.org/thread/s784s8778cys2vx0scbd28cl2lm1g6vt] for
> details.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
