cloudera / cloudera-scripts-for-log4j

Scripts for addressing log4j zero day security issue
Apache License 2.0
87 stars 68 forks source link

CDP : Correction for find tar.gz files not working if targetdir is a link #35

Open EricDele opened 2 years ago

EricDele commented 2 years ago

Hi If default targetdir (/opt/cloudera) is a link the find for .tar.gz files does not work and does not patch any .tar.gz file on the hosts.

In the vulnerability scan you dont use the same method (using globstar) and you find the tar.gz files not patched with the vulnerability.

So if you do the patch and after the scan you will see that the patch doesn't find the tar.gz files and doesn't patch it.

So I add a / at the end of targetdir for find to work.

Eric. Regards