hbase-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Enis Soztutar (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HBASE-13780) Default to 700 for HDFS root dir permissions for secure deployments
Date Tue, 26 May 2015 21:42:23 GMT
Enis Soztutar created HBASE-13780:
-------------------------------------

             Summary: Default to 700 for HDFS root dir permissions for secure deployments
                 Key: HBASE-13780
                 URL: https://issues.apache.org/jira/browse/HBASE-13780
             Project: HBase
          Issue Type: Improvement
            Reporter: Enis Soztutar
            Assignee: Enis Soztutar
             Fix For: 2.0.0, 1.2.0


Secure mode deployments should protect the files under HDFS root dir. We should check and
set the root dirs permissions on a kerberos setup so that users does not have to. 

We have {{hbase.data.umask.enable}} and {{hbase.data.umask}} for data files, but those are
not that useful since we should protect dir listing, and access to WAL files, snapshot files,
etc. 

See HBASE-13768 which has an integration test for this. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message