[HDFS-3096] dfs.datanode.data.dir.perm is set to 755 instead of 700 - ASF JIRA

Log work

Agile Board

Rank to Top

Rank to Bottom

Attach files

Attach Screenshot

Bulk Copy Attachments

Bulk Move Attachments

Add vote

Voters

Watch issue

Watchers

Create sub-task

Convert to sub-task

Move

Link

Clone

Labels

Update Comment Author

Replace String in Comment

Update Comment Visibility

Delete Comments

XML

Word

Printable

JSON

Details

Type: Bug
Status: Open
Priority: Major
Resolution: Unresolved
Affects Version/s: 0.23.0, 1.0.0
Fix Version/s: None
Component/s: datanode
Labels:
None

Target Version/s:

2.0.0-alpha, 1.3.0

Description

dfs.datanode.data.dir.perm is used by the datanode to set the permissions of it data directories. This is set by default to 755 which gives read permissions to everyone to that directory, opening up possibility of reading the data blocks by anyone in a secure cluster. Admins can over-ride this config but its sub-optimal practice for the default to be weak. IMO, the default should be strong and the admins can relax it if necessary.
The fix is to change default permissions to 700.