HBASE-26985 check permission for SecureBulkLoadManager (apache#4379)

skysiders · wenwj0 · commit b43a0eae5b9b · 2022-06-14T10:31:29.000+08:00
Signed-off-by: Viraj Jasani &lt;vjasani@apache.org&gt;
diff --git a/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java b/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java
@@ -125,6 +125,10 @@ public void start() throws IOException {
     }
     if (!fs.exists(baseStagingDir)) {
       fs.mkdirs(baseStagingDir, PERM_HIDDEN);
+      if (!PERM_HIDDEN.equals(PERM_HIDDEN.applyUMask(FsPermission.getUMask(conf)))) {
+        LOG.info("Modifying permissions to " + PERM_HIDDEN);
+        fs.setPermission(baseStagingDir, PERM_HIDDEN);
+      }
     }
   }
 

Original file line number	Diff line number	Diff line change
`@@ -125,6 +125,10 @@ public void start() throws IOException {`
`125`	`125`	`}`
`126`	`126`	`if (!fs.exists(baseStagingDir)) {`
`127`	`127`	`fs.mkdirs(baseStagingDir, PERM_HIDDEN);`
	`128`	`+ if (!PERM_HIDDEN.equals(PERM_HIDDEN.applyUMask(FsPermission.getUMask(conf)))) {`
	`129`	`+ LOG.info("Modifying permissions to " + PERM_HIDDEN);`
	`130`	`+ fs.setPermission(baseStagingDir, PERM_HIDDEN);`
	`131`	`+ }`
`128`	`132`	`}`
`129`	`133`	`}`
`130`	`134`