[HDDS-8573] Verify default setting for DN root dir to restrict non-admin access

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Fix Version/s: 1.4.0
• Component/s: OM, Ozone Datanode, Ozone Recon, SCM
• Assignee: Mohammad Arafat Khan
• Reporter: Mohammad Arafat Khan
• Created: 09/May/23 04:46
• Updated: 03/Aug/23 11:06
• Resolved: 24/May/23 16:51

Description

The permissions to the DN storage dirs should be 750 or tighter, to restrict non-root users from reading user data.

This came up during the bootcamp where the DNs directories are configured with 755 by default.

https://github.com/apache/ozone/pull/4682

Issue Links

• links to: Github Pull Request #4682