HBASE-26985 check permission for SecureBulkLoadManager (#4379)

skysiders · virajjasani · commit 2e08c69c5c9a · 2022-06-02T15:30:31.000-07:00
Signed-off-by: Viraj Jasani &lt;vjasani@apache.org&gt;
diff --git a/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java b/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java
@@ -124,6 +124,10 @@ public void start() throws IOException {
     }
     if (!fs.exists(baseStagingDir)) {
       fs.mkdirs(baseStagingDir, PERM_HIDDEN);
+      if (!PERM_HIDDEN.equals(PERM_HIDDEN.applyUMask(FsPermission.getUMask(conf)))) {
+        LOG.info("Modifying permissions to " + PERM_HIDDEN);
+        fs.setPermission(baseStagingDir, PERM_HIDDEN);
+      }
     }
   }
 

Original file line number	Diff line number	Diff line change
`@@ -124,6 +124,10 @@ public void start() throws IOException {`
`124`	`124`	`}`
`125`	`125`	`if (!fs.exists(baseStagingDir)) {`
`126`	`126`	`fs.mkdirs(baseStagingDir, PERM_HIDDEN);`
	`127`	`+ if (!PERM_HIDDEN.equals(PERM_HIDDEN.applyUMask(FsPermission.getUMask(conf)))) {`
	`128`	`+ LOG.info("Modifying permissions to " + PERM_HIDDEN);`
	`129`	`+ fs.setPermission(baseStagingDir, PERM_HIDDEN);`
	`130`	`+ }`
`127`	`131`	`}`
`128`	`132`	`}`
`129`	`133`