[HDFS-4139] fuse-dfs RO mode still allows file truncation

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.2-alpha
• Fix Version/s: 2.0.3-alpha
• Component/s: fuse-dfs
• Hadoop Flags: Reviewed
• Assignee: Colin McCabe
• Reporter: Andy Isaacson
• Created: 01/Nov/12 22:16
• Updated: 13/Mar/15 23:14
• Resolved: 14/Nov/12 06:19

Description

Mounting a fuse-dfs in readonly mode with "-oro" still allows the user to truncate files.

$ grep fuse /etc/fstab
hadoop-fuse-dfs#dfs://ubu-cdh-0.local /export/hdfs fuse noauto,ro 0 0
$ sudo mount /export/hdfs
$ hdfs dfs -ls /tmp
...
-rw-r--r--   3 ubuntu hadoop          4 2012-11-01 14:18 /tmp/blah.txt
$ echo foo > /export/hdfs/tmp/blah.txt
-bash: /export/hdfs/tmp/blah.txt: Permission denied
$  hdfs dfs -ls /tmp
...
-rw-r--r--   3 ubuntu hadoop          0 2012-11-01 14:28 /tmp/blah.txt
$ ps ax | grep dfs
...
13639 ?        Ssl    0:02 /usr/lib/hadoop/bin/fuse_dfs dfs://ubu-cdh-0.local /export/hdfs -o ro,dev,suid

Issue Links

• is duplicated by: HDFS-1841 Enforce read-only permissions in FUSE open()