[ https://issues.apache.org/jira/browse/HIVE-2079?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13012994#comment-13012994 ]
Edward Capriolo commented on HIVE-2079: --------------------------------------- Really? What should it be? Any why? How does this apply to deployments outside yours? > The warehouse directory shouldn't be 777'ed > ------------------------------------------- > > Key: HIVE-2079 > URL: https://issues.apache.org/jira/browse/HIVE-2079 > Project: Hive > Issue Type: Bug > Components: Metastore, Security > Reporter: Devaraj Das > Assignee: Mac Yang > Fix For: 0.8.0 > > > The warehouse directory is created with a permissions of 777. This is to > allow any user to successfully create database/table directories there. The > security issue is that anyone can delete any directory in the warehouse. We > should fix this hole. -- This message is automatically generated by JIRA. For more information on JIRA, see: http://www.atlassian.com/software/jira