<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Thu Feb 08 04:01:33 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[SERVER-22829] WiredTiger data files world-readable</title>
                <link>https://jira.mongodb.org/browse/SERVER-22829</link>
                <project id="10000" key="SERVER">Core Server</project>
                    <description>&lt;p&gt;The WiredTiger data files in the data directory are given permissions &lt;/p&gt;
&lt;p/&gt;
&lt;div id=&quot;syntaxplugin&quot; class=&quot;syntaxplugin&quot; style=&quot;border: 1px dashed #bbb; border-radius: 5px !important; overflow: auto; max-height: 30em;&quot;&gt;
&lt;table cellspacing=&quot;0&quot; cellpadding=&quot;0&quot; border=&quot;0&quot; width=&quot;100%&quot; style=&quot;font-size: 1em; line-height: 1.4em !important; font-weight: normal; font-style: normal; color: black;&quot;&gt;
		&lt;tbody &gt;
				&lt;tr id=&quot;syntaxplugin_code_and_gutter&quot;&gt;
						&lt;td  style=&quot; line-height: 1.4em !important; padding: 0em; vertical-align: top;&quot;&gt;
					&lt;pre style=&quot;font-size: 1em; margin: 0 10px;  margin-top: 10px;   margin-bottom: 10px;  width: auto; padding: 0;&quot;&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt; 666 xor umask &lt;/span&gt;&lt;/pre&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
			&lt;/tbody&gt;
&lt;/table&gt;
&lt;/div&gt;
&lt;p/&gt;

&lt;p&gt;As rad as this number is, unless there is a pressing reason for more open permissions we should probably change it to 600 since that is what mmapv1/legacy mongo does.&lt;/p&gt;</description>
                <environment></environment>
        <key id="238081">SERVER-22829</key>
            <summary>WiredTiger data files world-readable</summary>
                <type id="1" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14703&amp;avatarType=issuetype">Bug</type>
                                            <priority id="3" iconUrl="https://jira.mongodb.org/images/icons/priorities/major.svg">Major - P3</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="9">Done</resolution>
                                        <assignee username="andrew.morrow@mongodb.com">Andrew Morrow</assignee>
                                    <reporter username="andreas.nilsson">Andreas Nilsson</reporter>
                        <labels>
                    </labels>
                <created>Thu, 5 Nov 2015 21:55:12 +0000</created>
                <updated>Tue, 1 Jan 2019 15:55:01 +0000</updated>
                            <resolved>Fri, 18 Aug 2017 22:25:22 +0000</resolved>
                                                    <fixVersion>3.5.12</fixVersion>
                                    <component>Security</component>
                    <component>Storage</component>
                                        <votes>2</votes>
                                    <watches>21</watches>
                                                                                                                <comments>
                            <comment id="1651997" author="xgen-internal-githook" created="Fri, 18 Aug 2017 22:21:59 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{&apos;username&apos;: &apos;acmorrow&apos;, &apos;email&apos;: &apos;acm@mongodb.com&apos;, &apos;name&apos;: &apos;Andrew Morrow&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-22829&quot; title=&quot;WiredTiger data files world-readable&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-22829&quot;&gt;&lt;del&gt;SERVER-22829&lt;/del&gt;&lt;/a&gt; Strip group and other permissions on startup unless overridden&lt;br/&gt;
Branch: master&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo/commit/b3ad5d465cd2fec4983ff84be9da2cc06c1dac97&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo/commit/b3ad5d465cd2fec4983ff84be9da2cc06c1dac97&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="1619591" author="alexander.gorrod" created="Wed, 12 Jul 2017 06:04:20 +0000"  >&lt;p&gt;Upon conversation with &lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=keith.bostic&quot; class=&quot;user-hover&quot; rel=&quot;keith.bostic&quot;&gt;keith.bostic&lt;/a&gt; I&apos;ve realized that the approach I outlined isn&apos;t right.&lt;/p&gt;

&lt;p&gt;The right approach is for MongoDB to select an appropriate umask and apply it prior to calling &lt;tt&gt;wiredtiger_open&lt;/tt&gt; - doing that will result in new files having the expected permissions, and allows for MongoDB to use consistently permissioned files across all components in the system.&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=backlog-server-platform&quot; class=&quot;user-hover&quot; rel=&quot;backlog-server-platform&quot;&gt;backlog-server-platform&lt;/a&gt; this feels more like a platforms issue than a storage issue - there are other components in MongoDB than storage that create files.&lt;/p&gt;</comment>
                            <comment id="1617358" author="alexander.gorrod" created="Mon, 10 Jul 2017 05:23:26 +0000"  >&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=keith.bostic&quot; class=&quot;user-hover&quot; rel=&quot;keith.bostic&quot;&gt;keith.bostic&lt;/a&gt; I believe WiredTiger should at least provide MongoDB the opportunity to configure the behavior - to that end I&apos;ve opened (and linked) &lt;a href=&quot;https://jira.mongodb.org/browse/WT-3420&quot; title=&quot;Add ability to choose file permissions for created files&quot; class=&quot;issue-link&quot; data-issue-key=&quot;WT-3420&quot;&gt;&lt;del&gt;WT-3420&lt;/del&gt;&lt;/a&gt;. Once that work is done we should revisit this ticket.&lt;/p&gt;</comment>
                            <comment id="1616167" author="alexbyk" created="Fri, 7 Jul 2017 12:22:04 +0000"  >&lt;p&gt;@Keith Bostic, hi.&lt;/p&gt;

&lt;p&gt;It&apos;ll be superfluous(I&apos;ve already created a security issue with detailed explanation), so I&apos;ll be concise here: nobody will believe that this issue is even possible and is unresolved from 2015 unless he sees it with his own eyes. Definitely MongoDB inc is a great company and this happened only because you work too hard to make a great product and sometimes forget about vacation. You can fix this. I believe in you. &lt;/p&gt;

&lt;p&gt;Captain&apos;s here: Without doubt all files should be created with zero &quot;o&quot; flag. Maybe using umask(S_IRWXG | S_IRWXO) like postgres does is too restrictive, especially if there is any software that requires access to files, but 0660 would be enough for any debuggin|backup tools.  MongoDB also can accept something like MONGODB_UMASK, MONGODB_UMASK_DIR env. variables. o+r can be useful only for attacker whose intentions are to steal db files.&lt;/p&gt;
&lt;ul&gt;
	&lt;li&gt;flies away *&lt;/li&gt;
&lt;/ul&gt;
</comment>
                            <comment id="1616109" author="keith.bostic" created="Fri, 7 Jul 2017 10:37:25 +0000"  >&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=alexbyk&quot; class=&quot;user-hover&quot; rel=&quot;alexbyk&quot;&gt;alexbyk&lt;/a&gt;, can you please give us some details of the problems you saw and why they occurred?&lt;/p&gt;</comment>
                            <comment id="1616011" author="alexbyk" created="Fri, 7 Jul 2017 06:25:06 +0000"  >&lt;p&gt;Faced this issue a couple of hours ago. In my case this was a big security vulnerability. I was very surprised and right now I&apos;m even more surprised to see Created: 2015. &lt;/p&gt;</comment>
                            <comment id="1183105" author="martin.bligh" created="Wed, 24 Feb 2016 14:49:33 +0000"  >&lt;p&gt;Summary of discussion with Keith:&lt;/p&gt;
&lt;ul class=&quot;alternate&quot; type=&quot;square&quot;&gt;
	&lt;li&gt;WT is a library and it&apos;s appropriate to avoid setting policy here, so they use the most liberal setting to leave it to the user&lt;/li&gt;
	&lt;li&gt;umask is traditionally for the user.&lt;/li&gt;
	&lt;li&gt;current setup combined with default Linux umask of 0002 defaults to world-readable files which relies too much on the user.&lt;/li&gt;
	&lt;li&gt;distros should be creating the db directory with more restrictive permissions (eg 750)&lt;/li&gt;
	&lt;li&gt;want to avoid yet more tweakable knobs if possible.&lt;/li&gt;
	&lt;li&gt;we have to deal with other storage engines, directories etc.&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;Seems like the best compromise would be to or current users umask with 0007 (which will stop us giving any permissions to &quot;other&quot; by default). Not convinced it&apos;s worth the extra complexity of making this tweakable - people wanting to do backups / debug as a separate user are better served by using groups, not world-readability.&lt;/p&gt;</comment>
                            <comment id="1183089" author="martin.bligh" created="Wed, 24 Feb 2016 14:40:50 +0000"  >&lt;p&gt;Moved to a SERVER- ticket instead of WT-. We have to do the right thing for other storage engines, files and directories. &lt;/p&gt;</comment>
                            <comment id="1181607" author="martin.bligh" created="Tue, 23 Feb 2016 11:30:08 +0000"  >&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=keith.bostic&quot; class=&quot;user-hover&quot; rel=&quot;keith.bostic&quot;&gt;keith.bostic&lt;/a&gt; not really - I think the normal situation is that the umask belongs to the user to set, not the application.&lt;br/&gt;
Not sure why we&apos;d alter that rather than just change the base permission we&apos;re creating with?&lt;/p&gt;</comment>
                            <comment id="1181268" author="keith.bostic" created="Mon, 22 Feb 2016 23:58:16 +0000"  >&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=andreas.nilsson&quot; class=&quot;user-hover&quot; rel=&quot;andreas.nilsson&quot;&gt;andreas.nilsson&lt;/a&gt;, it sounds to me like &lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=martin.bligh&quot; class=&quot;user-hover&quot; rel=&quot;martin.bligh&quot;&gt;martin.bligh&lt;/a&gt; is also inclined to have mongod set the umask. (Martin, is that correct?)&lt;/p&gt;

&lt;p&gt;I think that makes the most sense for a couple reasons:&lt;/p&gt;

&lt;ul class=&quot;alternate&quot; type=&quot;square&quot;&gt;
	&lt;li&gt;if mongod wants created files to have a restricted mode, it&apos;s not just WiredTiger files that should be created in a restricted mode, it should be all files created by mongod,&lt;/li&gt;
	&lt;li&gt;and, I assume mongod wants files created by all engines to be opened in a restricted mode, and any API added to WiredTiger wouldn&apos;t be available in RocksDB, for example.&lt;/li&gt;
&lt;/ul&gt;
</comment>
                            <comment id="1180625" author="martin.bligh" created="Mon, 22 Feb 2016 16:02:34 +0000"  >&lt;p&gt;I think leaving umask to the user is the normal UNIX semantic. &lt;br/&gt;
I can see 640 or 660 making sense ... 666 does seem oddly overpermissive ...&lt;/p&gt;</comment>
                            <comment id="1180616" author="andreas.nilsson@10gen.com" created="Mon, 22 Feb 2016 15:53:57 +0000"  >&lt;p&gt;I stick with my original statement when filing the ticket.&lt;/p&gt;

&lt;p&gt;I can&apos;t really make an assessment of the discussion above or choose between a umask, adding a WT option for mode or some other option.&lt;/p&gt;

&lt;p&gt;cc &lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=martin.bligh&quot; class=&quot;user-hover&quot; rel=&quot;martin.bligh&quot;&gt;martin.bligh&lt;/a&gt; is probably a better candidate to weigh in here.&lt;/p&gt;</comment>
                            <comment id="1179966" author="keith.bostic" created="Sun, 21 Feb 2016 17:02:29 +0000"  >&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=andreas.nilsson&quot; class=&quot;user-hover&quot; rel=&quot;andreas.nilsson&quot;&gt;andreas.nilsson&lt;/a&gt;, &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-22829&quot; title=&quot;WiredTiger data files world-readable&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-22829&quot;&gt;&lt;del&gt;WT-2201&lt;/del&gt;&lt;/a&gt; has stalled, and I wanted to check in with you. Do you still believe there should be a WiredTiger change?&lt;/p&gt;</comment>
                            <comment id="1081626" author="keith.bostic" created="Fri, 6 Nov 2015 14:05:04 +0000"  >&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=michael.cahill&quot; class=&quot;user-hover&quot; rel=&quot;michael.cahill&quot;&gt;michael.cahill&lt;/a&gt;, we could crack a string &quot;rwrwrw&quot; instead of messing with octal?&lt;/p&gt;</comment>
                            <comment id="1081623" author="keith.bostic" created="Fri, 6 Nov 2015 13:58:24 +0000"  >&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=redbeard0531&quot; class=&quot;user-hover&quot; rel=&quot;redbeard0531&quot;&gt;redbeard0531&lt;/a&gt;, I think it&apos;s nastier than that, the directory permissions allow you to remove the data files and replace them with different data files.&lt;/p&gt;

&lt;p&gt;I would agree that tightening down data file permissions means the files cannot be read in some cases (and I have no objection to doing that in some configurable way), but I don&apos;t think we&apos;ve significantly increased security by the change.&lt;/p&gt;

&lt;p&gt;Should MongoDB be doing a check on the directory permissions?&lt;/p&gt;</comment>
                            <comment id="1081303" author="michael.cahill" created="Fri, 6 Nov 2015 00:05:47 +0000"  >&lt;p&gt;The issue here isn&apos;t concurrent access, it&apos;s that other uses of WiredTiger might want users within a group to be able to access the same database (serially).  I don&apos;t know of any such application currently using WiredTiger, but we faced this kind of issue in previous lives.&lt;/p&gt;

&lt;p&gt;Could &lt;tt&gt;mongod&lt;/tt&gt; just call &lt;tt&gt;umask&lt;/tt&gt;?  That would get the protection you&apos;re talking about consistently regardless of storage engine.  If this would cause problems, presumably they are potential leaks of sensitive information?&lt;/p&gt;

&lt;p&gt;We could certainly add an &lt;tt&gt;open_mode&lt;/tt&gt; option to &lt;tt&gt;wiredtiger_open&lt;/tt&gt; that would default to &quot;0666&quot; to avoid breaking existing WiredTiger apps.  Unfortunately we don&apos;t currently support octal values in config strings so it would be a little awkward, but we could make it work.  I think &lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=keith.bostic&quot; class=&quot;user-hover&quot; rel=&quot;keith.bostic&quot;&gt;keith.bostic&lt;/a&gt; just wants to be sure that the requirements are clear before committing to an approach.&lt;/p&gt;</comment>
                            <comment id="1081247" author="andreas.nilsson@10gen.com" created="Thu, 5 Nov 2015 23:10:18 +0000"  >&lt;p&gt;I don&apos;t see how concurrent write access to the datafiles might be desirable. I could possibly stretch to 640 making sense, or make it configurable in wiredtiger_open?&lt;/p&gt;

&lt;p&gt;In all fairness the user can set the umask to anything. However I&apos;m mostly concerned with the change in behavior.&lt;/p&gt;</comment>
                            <comment id="1081235" author="redbeard0531" created="Thu, 5 Nov 2015 23:03:56 +0000"  >&lt;p&gt;The directory permissions allow you to see what files exist, but do not let you access them. It doesn&apos;t seem like we should assume that everyone that is allowed to see which files exist should be allowed to look inside the files. As an example, /etc is world readable but /etc/shadow (which contains the encrypted passwords) isn&apos;t.&lt;/p&gt;</comment>
                            <comment id="1081167" author="keith.bostic" created="Thu, 5 Nov 2015 22:20:00 +0000"  >&lt;p&gt;I haven&apos;t thought about this much, so forgive me if I&apos;m missing the obvious... but if the directory permissions allow group access, and we don&apos;t allow group access, haven&apos;t we prevented a reasonable configuration from working?&lt;/p&gt;</comment>
                            <comment id="1081158" author="andreas.nilsson@10gen.com" created="Thu, 5 Nov 2015 22:15:49 +0000"  >&lt;p&gt;I agree, the enclosing directory permissions should be restrictive. However I doubt that they are always set correctly.&lt;/p&gt;

&lt;p&gt;My concern is that when we are changing to WT as default, we are also changing the default behavior of the data files to more permissive unless you have taken specific steps to protect the data directory.&lt;/p&gt;</comment>
                            <comment id="1081154" author="keith.bostic" created="Thu, 5 Nov 2015 22:11:23 +0000"  >&lt;p&gt;Can you go into more detail about the problem this fixes?&lt;/p&gt;

&lt;p&gt;If the enclosing directory permissions aren&apos;t correct and sufficient, aren&apos;t we already in trouble?&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10011">
                    <name>Depends</name>
                                            <outwardlinks description="depends on">
                                        <issuelink>
            <issuekey id="402013">WT-3420</issuekey>
        </issuelink>
                            </outwardlinks>
                                                        </issuelinktype>
                            <issuelinktype id="10320">
                    <name>Documented</name>
                                                                <inwardlinks description="is documented by">
                                        <issuelink>
            <issuekey id="421681">DOCS-10737</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                            <issuelinktype id="10010">
                    <name>Duplicate</name>
                                            <outwardlinks description="duplicates">
                                                        </outwardlinks>
                                                        </issuelinktype>
                            <issuelinktype id="10012">
                    <name>Related</name>
                                            <outwardlinks description="related to">
                                        <issuelink>
            <issuekey id="100335">SERVER-11887</issuekey>
        </issuelink>
                            </outwardlinks>
                                                        </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                <customfield id="customfield_10050" key="com.atlassian.jira.toolkit:comments">
                        <customfieldname># Replies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>21.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_18555" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname># of Sprints</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1.0</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_10011" key="com.atlassian.jira.plugin.system.customfieldtypes:radiobuttons">
                        <customfieldname>Backwards Compatibility</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10011"><![CDATA[Minor Change]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_10055" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>Date of 1st Reply</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Thu, 5 Nov 2015 22:11:23 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10052" key="com.atlassian.jira.toolkit:dayslastcommented">
                        <customfieldname>Days since reply</customfieldname>
                        <customfieldvalues>
                                        6 years, 25 weeks, 5 days ago
    
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_18254" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Dependencies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue><![CDATA[<s><a href='https://jira.mongodb.org/browse/WT-3420'>WT-3420</a></s>]]></customfieldvalue>


                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10057" key="com.atlassian.jira.toolkit:lastusercommented">
                        <customfieldname>Last comment by Customer</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>true</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10056" key="com.atlassian.jira.toolkit:lastupdaterorcommenter">
                        <customfieldname>Last commenter</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>spencer.brown@mongodb.com</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_11151" key="com.atlassian.jira.toolkit:LastCommentDate">
                        <customfieldname>Last public comment date</customfieldname>
                        <customfieldvalues>
                            6 years, 25 weeks, 5 days ago
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                    <customfield id="customfield_10032" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Operating System</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10026"><![CDATA[ALL]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_10051" key="com.atlassian.jira.toolkit:participants">
                        <customfieldname>Participants</customfieldname>
                        <customfieldvalues>
                                        <customfieldvalue>alexbyk</customfieldvalue>
            <customfieldvalue>alexander.gorrod@mongodb.com</customfieldvalue>
            <customfieldvalue>andreas.nilsson</customfieldvalue>
            <customfieldvalue>andrew.morrow@mongodb.com</customfieldvalue>
            <customfieldvalue>xgen-internal-githook</customfieldvalue>
            <customfieldvalue>keith.bostic@mongodb.com</customfieldvalue>
            <customfieldvalue>martin.bligh</customfieldvalue>
            <customfieldvalue>mathias@mongodb.com</customfieldvalue>
            <customfieldvalue>michael.cahill@mongodb.com</customfieldvalue>
    
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                        <customfield id="customfield_14254" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Product Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hrkf9r:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|hra0j3:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9223372036854775807</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_23361" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Requested By</customfieldname>
                        <customfieldvalues>
                                

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                        <customfield id="customfield_10557" key="com.pyxis.greenhopper.jira:gh-sprint">
                        <customfieldname>Sprint</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue id="1829">Platforms 2017-08-21</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10053" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>Time In Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_22870" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Triagers</customfieldname>
                        <customfieldvalues>
                                

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_14350" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>serverRank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hsf74n:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                    </customfields>
    </item>
</channel>
</rss>