Mailing-List: contact hdfs-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: hdfs-issues@hadoop.apache.org
Date: Tue, 22 Jul 2014 21:58:39 +0000 (UTC)
From: "Allen Wittenauer (JIRA)" <jira@apache.org>
To: hdfs-issues@hadoop.apache.org
Message-ID: <JIRA.12720339.1402405108841.24376.1406066319275@arcas>
In-Reply-To: <JIRA.12720339.1402405108841@arcas>
References: <JIRA.12720339.1402405108841@arcas>
Subject: [jira] [Commented] (HDFS-6509) create a /.reserved/raw filesystem
 namespace
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/HDFS-6509?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14070992#comment-14070992 ] 

Allen Wittenauer commented on HDFS-6509:
----------------------------------------

I'll be honest I haven't been following closely this set of jiras. So let me apologize in advance. But this jira makes me wonder: what happens when a non-admin uses distcp?  .e.g., a lot of systems are configured that don't allow HDFS to run MR jobs.  Will they not be allowed to distcp encrypted data?

> create a /.reserved/raw filesystem namespace
> --------------------------------------------
>
>                 Key: HDFS-6509
>                 URL: https://issues.apache.org/jira/browse/HDFS-6509
>             Project: Hadoop HDFS
>          Issue Type: Sub-task
>          Components: security
>    Affects Versions: fs-encryption (HADOOP-10150 and HDFS-6134)
>            Reporter: Charles Lamb
>            Assignee: Charles Lamb
>         Attachments: HDFS-6509.001.patch, HDFS-6509distcpandDataatRestEncryption-2.pdf, HDFS-6509distcpandDataatRestEncryption.pdf
>
>
> This is part of the work for making distcp work with Data at Rest Encryption. Per the attached document, create a /.reserved/raw HDFS filesystem namespace that allows access to the encrypted bytes of a file.


--
This message was sent by Atlassian JIRA
(v6.2#6252)