[ 
https://issues.apache.org/jira/browse/HDFS-4519?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13584863#comment-13584863
 ] 

Jos Backus commented on HDFS-4519:
----------------------------------

Sorry, Chris, didn't mean to derail this ticket. I like what you propose 
regarding fixing/extending the jsvc support, so +1 from me :)

I will file a different ticket for my enhancement suggestion (just like I did 
internally when the issue came up). Briefly, my suggestion was to merge the 
jsvc-run class code into the main datanode class, and use JNI to call setuid() 
to drop privileges after allocating the privilege-requiring resources (see 
http://www2.sys-con.com/itsg/virtualcd/java/archives/0510/Silverman/index.html 
for details how this can be done).
                
> Support override of jsvc binary and log file locations when launching secure 
> datanode.
> --------------------------------------------------------------------------------------
>
>                 Key: HDFS-4519
>                 URL: https://issues.apache.org/jira/browse/HDFS-4519
>             Project: Hadoop HDFS
>          Issue Type: Bug
>          Components: datanode, scripts
>    Affects Versions: 1.2.0
>            Reporter: Chris Nauroth
>            Assignee: Chris Nauroth
>         Attachments: HDFS-4519-branch-1.1.patch
>
>
> Currently, builds based on branch-1 bundle a specific version of jsvc 
> pre-built for Linux, and the startup scripts hard-code the location of the 
> output and error files.  Some deployments may prefer to upgrade to a 
> different version of jsvc, independent of the version bundled in Hadoop, and 
> redirect its output elsewhere.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to