[
https://issues.apache.org/jira/browse/ACCUMULO-3338?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14214759#comment-14214759
]
Sean Busbey commented on ACCUMULO-3338:
---------------------------------------
-1
I've run into many _many_ cases where users treat the example configurations as
appropriate for production use. That is, they copy them and then they only
change something if stuff doesn't appear to work. We can deny this with our
messaging all we want, but our actions (specifically in having a
bootstrap_config.sh file and telling people to run it) don't line up with that.
This change seems to encourage that practice, IMO. If there are classpaths that
are better suited for running in HDP, then HDP should include an example
configuration that does that or have its cluster configuration management
software include the correct paths when it generates the configuration for an
Accumulo instance. We do not include vendor specific paths for any other
distribution and I don't think we should start now.
{quote}
bq. That's not quite true. The risk of extra paths in the classpath is that the
extra path might be writable by other users, depending on the platform and
circumstance, and could conceivably contain undesirable classes at some future
point, regardless of whether they currently contain any. In other words, the
risk is not "known bad jars present", it's "not known to be free of bad jars".
(by "bad jars", I mean anything incompatible, malicious, or unintentional)
That's true. I was assuming that children of /usr (aside from /usr/local) will
not be writable by anyone but a super-user.
{quote}
Systems get misconfigured all the time and we should be conservative in this
regard.
> Update example classpath configuration
> --------------------------------------
>
> Key: ACCUMULO-3338
> URL: https://issues.apache.org/jira/browse/ACCUMULO-3338
> Project: Accumulo
> Issue Type: Improvement
> Components: docs
> Reporter: Josh Elser
> Assignee: Josh Elser
> Priority: Trivial
> Fix For: 1.6.2, 1.7.0
>
> Time Spent: 1h
> Remaining Estimate: 0h
>
> Make sure the example configuration general.classpaths contain some extra
> paths for HDFS jars which make them more likely to generally work.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
