[ 
https://issues.apache.org/jira/browse/HIVE-2079?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13013604#comment-13013604
 ] 

Edward Capriolo commented on HIVE-2079:
---------------------------------------

Ok thanks that clears it up. This only effects those using hive-server and fat 
client is exempt. This should not be very difficult. Hive always works in side 
effect files and then does moves as the last step. So your technique to do 
elsewhere and then copy in and chown makes sense. +1

> The warehouse directory shouldn't be 777'ed
> -------------------------------------------
>
>                 Key: HIVE-2079
>                 URL: https://issues.apache.org/jira/browse/HIVE-2079
>             Project: Hive
>          Issue Type: Bug
>          Components: Metastore, Security
>            Reporter: Devaraj Das
>            Assignee: Mac Yang
>             Fix For: 0.8.0
>
>
> The warehouse directory is created with a permissions of 777. This is to 
> allow any user to successfully create database/table directories there. The 
> security issue is that anyone can delete any directory in the warehouse. We 
> should fix this hole.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to