HBASE-26985 check permission for SecureBulkLoadManager (#4379)

Signed-off-by: Viraj Jasani <vjasani@apache.org>
apache · Jun 2, 2022 · c0e8243 · c0e8243
1 parent 313a37f
commit c0e8243
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java b/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java
@@ -125,6 +125,10 @@ public void start() throws IOException {
     }
     if (!fs.exists(baseStagingDir)) {
       fs.mkdirs(baseStagingDir, PERM_HIDDEN);
+      if (!PERM_HIDDEN.equals(PERM_HIDDEN.applyUMask(FsPermission.getUMask(conf)))) {
+        LOG.info("Modifying permissions to " + PERM_HIDDEN);
+        fs.setPermission(baseStagingDir, PERM_HIDDEN);
+      }
     }
   }