hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Allen Wittenauer (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-6888) Remove audit logging of getFIleInfo()
Date Sun, 26 Apr 2015 01:20:39 GMT

    [ https://issues.apache.org/jira/browse/HDFS-6888?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14512817#comment-14512817
] 

Allen Wittenauer commented on HDFS-6888:
----------------------------------------

One of the key points of the HDFS audit log is to show accesses to files, including for security
purposes. If a user can legitimately use getFileInfo(), then it needs to get logged.

> Remove audit logging of getFIleInfo()
> -------------------------------------
>
>                 Key: HDFS-6888
>                 URL: https://issues.apache.org/jira/browse/HDFS-6888
>             Project: Hadoop HDFS
>          Issue Type: Bug
>    Affects Versions: 2.5.0
>            Reporter: Kihwal Lee
>            Assignee: Chen He
>              Labels: log
>         Attachments: HDFS-6888-2.patch, HDFS-6888-3.patch, HDFS-6888-4.patch, HDFS-6888-5.patch,
HDFS-6888-6.patch, HDFS-6888.patch
>
>
> The audit logging of getFileInfo() was added in HDFS-3733.  Since this is a one of the
most called method, users have noticed that audit log is now filled with this.  Since we now
have HTTP request logging, this seems unnecessary.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message