[HDFS-3535] Audit logging should log denied accesses

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0-alpha
• Fix Version/s: 2.0.2-alpha
• Component/s: namenode
• Hadoop Flags: Reviewed
• Assignee: Andy Isaacson
• Reporter: Andy Isaacson
• Created: 13/Jun/12 21:49
• Updated: 11/Oct/12 17:46
• Resolved: 26/Jun/12 18:18

Description

FSNamesystem.java logs an audit log entry when a user successfully accesses the filesystem:

      logAuditEvent(UserGroupInformation.getLoginUser(),
                    Server.getRemoteIp(),
                    "concat", Arrays.toString(srcs), target, resultingStat);

but there is no similar log when a user attempts to access the filesystem and is denied due to permissions. Competing systems do provide such logging of denied access attempts; we should too.