apache / apache/pulsar

permission maybe wrong for RocksdbMetadataStore

Open
#15,400 1 comment 0 reactions 0 assignees View on GitHub
Stale type/bug
Dominant language
Java
Stars
15.3k
Forks
3.8k
Avg merge
1d 14h
Merged PRs (30d)
160

Description

**Describe the bug**
While RocksdbMetadataStore init , it will create directory from dataPath use Files.createDirectories(dataPath); this path create with too loose that any one can read file in this directory.This may cause everyone can read logs, perhaps strict permission is more safe.

**Expected behavior**
Perhaps right permission for metadata directory is 700.

**Additional context**
I commit this for PULSAR-18 and PR for #15381

Contributor guide

Open the contributing guide

Research direction

Start with RocksdbMetadataStore initialization and the Files.createDirectories(dataPath) call described in the issue. Reproduce the directory creation and inspect the existing discussion around PULSAR-18 and PR #15381. Done means the metadata directory has the intended 700 permissions without breaking initialization.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
backend, databases
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.