[
https://issues.apache.org/jira/browse/HADOOP-15128?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16296316#comment-16296316
]
Eric Yang edited comment on HADOOP-15128 at 12/20/17 1:15 AM:
--------------------------------------------------------------
In HADOOP-2381, the discussion thread contains good insights why the original
code was written as such. We should throw exception when it is unable to load
permission information, and owner, group, permission information should not be
null. These safe guards are making sure the file system security is not
compromised. The recent change allows other class to extend RawLocalFileSystem
base class and circumvent security. HADOOP-10054 must be reverted to prevent
security hole. There are other ways to fix ViewFsFileStatus.toString() to make
sure the path is initialized properly without modifying FileStatus class.
was (Author: eyang):
In HADOOP-2381, the discussion thread contains good insights why the original
code was written as such. We should throw exception when it is unable to load
permission information, and owner, group, permission information should not be
null. These safe guards are making sure the file system security is not
compromised. The recent change allows other class to extend RawLocalFileSystem
base class and circumvent security. HADOOP-10054 must be reverted to prevent
security hole. There are other ways to fix ViewFsFileStatus.toString() to make
sure the path is initialized properly without modifying RawLocalFileSystem
class.
> TestViewFileSystem tests are broken in trunk
> --------------------------------------------
>
> Key: HADOOP-15128
> URL: https://issues.apache.org/jira/browse/HADOOP-15128
> Project: Hadoop Common
> Issue Type: Bug
> Components: viewfs
> Affects Versions: 3.1.0
> Reporter: Anu Engineer
> Assignee: Hanisha Koneru
>
> The fix in Hadoop-10054 seems to have caused a test failure. Please take a
> look. Thanks [~eyang] for reporting this.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org
