HBASE-26985 check permission for SecureBulkLoadManager (#4379)

Signed-off-by: Viraj Jasani <[email protected]>
apache · Jun 2, 2022 · 286c9c3 · 286c9c3
1 parent 58aaed1
commit 286c9c3
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java b/hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/SecureBulkLoadManager.java
@@ -125,6 +125,10 @@ public void start() throws IOException {
     }
     if (!fs.exists(baseStagingDir)) {
       fs.mkdirs(baseStagingDir, PERM_HIDDEN);
+      if (!PERM_HIDDEN.equals(PERM_HIDDEN.applyUMask(FsPermission.getUMask(conf)))) {
+        LOG.info("Modifying permissions to " + PERM_HIDDEN);
+        fs.setPermission(baseStagingDir, PERM_HIDDEN);
+      }
     }
   }