[HADOOP-12625] Add a config to disable the /logs endpoints

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.9.0
• Fix Version/s: 2.9.0, 3.0.0-alpha1
• Component/s: security
• Target Version/s: 2.9.0
• Hadoop Flags: Reviewed
• Assignee: Robert Kanter
• Reporter: Robert Kanter
• Created: 09/Dec/15 00:36
• Updated: 30/Aug/16 01:20
• Resolved: 09/Dec/15 22:38

Description

We should add a config to disable the /logs endpoint in HttpServer2. Listing a directory like this can be dangerous from a security perspective. We can keep it enabled by default for compatibility though.

Issue Links

• Dependent: HADOOP-12710 Remove dependency on commons-httpclient for TestHttpServerLogs