hadoop-common-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Doug Cutting (JIRA)" <j...@apache.org>
Subject [jira] Commented: (HADOOP-4368) Superuser privileges required to do "df"
Date Wed, 22 Oct 2008 22:49:44 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-4368?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12641989#action_12641989
] 

Doug Cutting commented on HADOOP-4368:
--------------------------------------

Pete, no one disagrees with your thesis, that getStats should not be restricted to superuser.
 The solution is to move it from DFSAdmin to FSShell.  Unfortunately it's not quite that simple,
since this is currently DFS-specific, and FSShell is generic.  But capacity is a fairly generic
operation.  So a proper fix might also add a FileSsytem method like:
{code}
public FsStatus FileSystem#getStatus()

public class FsStatus {
  public long getCapacity();
  public long getFree();
  public long getUsed();
}
{code}


> Superuser privileges required to do "df"
> ----------------------------------------
>
>                 Key: HADOOP-4368
>                 URL: https://issues.apache.org/jira/browse/HADOOP-4368
>             Project: Hadoop Core
>          Issue Type: Wish
>          Components: contrib/fuse-dfs, dfs
>    Affects Versions: 0.18.1
>            Reporter: Brian Bockelman
>            Priority: Minor
>   Original Estimate: 0.17h
>  Remaining Estimate: 0.17h
>
> super user privileges are required in DFS in order to get the file system statistics
(FSNamesystem.java, getStats method).  This means that when HDFS is mounted via fuse-dfs as
a non-root user, "df" is going to return 16exabytes total and 0 free instead of the correct
amount.
> As far as I can tell, there's no need to require super user privileges to see the file
system size (and historically in Unix, this is not required).
> To fix this, simply comment out the privilege check in the getStats method.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message