hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Steve Loughran (JIRA)" <j...@apache.org>
Subject [jira] Commented: (HADOOP-6566) Hadoop daemons should not start up if the ownership/permissions on the directories used at runtime are misconfigured
Date Mon, 15 Feb 2010 10:31:28 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-6566?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12833749#action_12833749
] 

Steve Loughran commented on HADOOP-6566:
----------------------------------------

Devaraj, this code isn't in Hadoop, it's in the stuff I wrap the Hadoop daemon classes with:
for the different services (NN, DN, etc) I create different directory lists and validate them.
Hence the inconsistent indentation with the main Hadoop codebase.

I think something like this can go into hadoop-core, one less thing for me to worry about,
though the new URI-driven directory lists probably complicates the logic. I suspect this code
only works for non-URI lists.

> Hadoop daemons should not start up if the ownership/permissions on the directories used
at runtime are misconfigured
> --------------------------------------------------------------------------------------------------------------------
>
>                 Key: HADOOP-6566
>                 URL: https://issues.apache.org/jira/browse/HADOOP-6566
>             Project: Hadoop Common
>          Issue Type: New Feature
>          Components: security
>            Reporter: Devaraj Das
>             Fix For: 0.22.0
>
>
> The Hadoop daemons (like datanode, namenode) should refuse to start up if the ownership/permissions
on directories they use at runtime are misconfigured or they are not as expected. For example,
the local directory where the filesystem image is stored should be owned by the user running
the namenode process and should be only readable by that user. We can provide this feature
in common and HDFS and MapReduce can use the same.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message