Problem Definition

Currently the Elasticsearch pid file exists in the bin directory under the Bitbucket Server installation directory. Due to this the atlbitbucket user must have access to write to this folder. This can be seen as a security risk as the application (Bitbucket) has access to its own binaries/startup scripts.

Suggested Solution

The PID should be moved to a more acceptable location based on the environment that Elasticsearch is being run on.

Workaround

Linux

Change line 42 of start-search.sh to change the piddir to an acceptable folder.
If running as a service, the PIDFILE variable in /etc/init.d/atlbitbucket_search will need to be changed.