From c0e8243c8bd50fb3e2b4166ea4c9531f8127f1ad Mon Sep 17 00:00:00 2001 From: skysiders <64545691+skysiders@users.noreply.github.com> Date: Fri, 3 Jun 2022 06:28:22 +0800 Subject: [PATCH] HBASE-26985 check permission for SecureBulkLoadManager (#4379) Signed-off-by: Viraj Jasani --- .../hadoop/hbase/regionserver/SecureBulkLoadManager.java | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java b/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java index 214372110704..01d95ad863fc 100644 --- a/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java +++ b/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java @@ -125,6 +125,10 @@ public void start() throws IOException { } if (!fs.exists(baseStagingDir)) { fs.mkdirs(baseStagingDir, PERM_HIDDEN); + if (!PERM_HIDDEN.equals(PERM_HIDDEN.applyUMask(FsPermission.getUMask(conf)))) { + LOG.info("Modifying permissions to " + PERM_HIDDEN); + fs.setPermission(baseStagingDir, PERM_HIDDEN); + } } }