lucene-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hoss Man (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (SOLR-7826) Permission issues when creating cores with bin/solr
Date Mon, 03 Oct 2016 17:26:21 GMT

    [ https://issues.apache.org/jira/browse/SOLR-7826?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15542918#comment-15542918
] 

Hoss Man commented on SOLR-7826:
--------------------------------

bq. Is this a real or theoretical problem? ...

By definition it's a theoretical problem because this code added here hasn't been released
yet -- that doesn't mean we shouldn't give serious consideration to it ... we shouldn't have
to wait for users to get screwed by bugs before we discuss if there is a better solution.

bq. Testing on Ubuntu shows that the /var/solr folder is not writable by other than the solr
user, and new folders created by a user has group "solr"....

you seem to be assuming that people only install using the installation script, and that no
one might ever changes the default groups/perms of the solr user.  On platforms where people
install solr manually (either because the install script doesn't support their os, or because
they choose to) the default group/perms of those directories could be anything.

We shouldn't make {{bin/solr}} only work well -- or fail cleanly -- if you install exactly
as we expect you to (and never change any file system perms, or group masks)  when it's just
as easy to make {{bin/solr}} work well and fail cleanly anytime by testing the *current* directory
stats

> Permission issues when creating cores with bin/solr
> ---------------------------------------------------
>
>                 Key: SOLR-7826
>                 URL: https://issues.apache.org/jira/browse/SOLR-7826
>             Project: Solr
>          Issue Type: Improvement
>            Reporter: Shawn Heisey
>            Assignee: Jan H√łydahl
>            Priority: Minor
>              Labels: newdev
>             Fix For: 6.3, master (7.0)
>
>         Attachments: SOLR-7826.patch, SOLR-7826.patch
>
>
> Ran into an interesting situation on IRC today.
> Solr has been installed as a service using the shell script install_solr_service.sh ...
so it is running as an unprivileged user.
> User is running "bin/solr create" as root.  This causes permission problems, because
the script creates the core's instanceDir with root ownership, then when Solr is instructed
to actually create the core, it cannot create the dataDir.
> Enhancement idea:  When the install script is used, leave breadcrumbs somewhere so that
the "create core" section of the main script can find it and su to the user specified during
install.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org


Mime
View raw message