Return-Path: Delivered-To: apmail-hadoop-core-dev-archive@www.apache.org Received: (qmail 74202 invoked from network); 4 Dec 2008 17:51:07 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 4 Dec 2008 17:51:07 -0000 Received: (qmail 10798 invoked by uid 500); 4 Dec 2008 17:51:16 -0000 Delivered-To: apmail-hadoop-core-dev-archive@hadoop.apache.org Received: (qmail 10762 invoked by uid 500); 4 Dec 2008 17:51:16 -0000 Mailing-List: contact core-dev-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: core-dev@hadoop.apache.org Delivered-To: mailing list core-dev@hadoop.apache.org Received: (qmail 10751 invoked by uid 99); 4 Dec 2008 17:51:16 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 04 Dec 2008 09:51:16 -0800 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.140] (HELO brutus.apache.org) (140.211.11.140) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 04 Dec 2008 17:49:56 +0000 Received: from brutus (localhost [127.0.0.1]) by brutus.apache.org (Postfix) with ESMTP id 5433D234C2EC for ; Thu, 4 Dec 2008 09:50:44 -0800 (PST) Message-ID: <2047652212.1228413044343.JavaMail.jira@brutus> Date: Thu, 4 Dec 2008 09:50:44 -0800 (PST) From: "Konstantin Shvachko (JIRA)" To: core-dev@hadoop.apache.org Subject: [jira] Commented: (HADOOP-4368) Superuser privileges required to do "df" In-Reply-To: <733352859.1223421884260.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/HADOOP-4368?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12653382#action_12653382 ] Konstantin Shvachko commented on HADOOP-4368: --------------------------------------------- I am confused. Does that mean that anybody will be able to connect to HDFS as a superuser via fuse? It seamed like a rather simple move of a command from one class to another. Why would you want to cut corners like that? > Superuser privileges required to do "df" > ---------------------------------------- > > Key: HADOOP-4368 > URL: https://issues.apache.org/jira/browse/HADOOP-4368 > Project: Hadoop Core > Issue Type: Wish > Components: contrib/fuse-dfs, dfs > Affects Versions: 0.18.1 > Reporter: Brian Bockelman > Priority: Minor > Attachments: fuse_statfs.patch, fuse_statfs_trunk.patch > > Original Estimate: 0.17h > Remaining Estimate: 0.17h > > super user privileges are required in DFS in order to get the file system statistics (FSNamesystem.java, getStats method). This means that when HDFS is mounted via fuse-dfs as a non-root user, "df" is going to return 16exabytes total and 0 free instead of the correct amount. > As far as I can tell, there's no need to require super user privileges to see the file system size (and historically in Unix, this is not required). > To fix this, simply comment out the privilege check in the getStats method. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.