[HIVE-5400] Allow admins to disable compile and other commands

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.13.0

Release Note

Introduces new hive config parameter -
hive.security.command.whitelist .
This can use used to restrict the set of commands that can be run. Currently supported command list is - "set,reset,dfs,add,delete" and by default all these commands are supported. If you want to restrict any of these commands, you can set the config to a value that does not have the command in it.

• Assignee: Brock Noland
• Reporter: Brock Noland
• Created: 30/Sep/13 20:51
• Updated: 01/Feb/14 14:52
• Resolved: 06/Oct/13 01:09

Description

From here: https://issues.apache.org/jira/browse/HIVE-5253?focusedCommentId=13782220&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-13782220

I think we should afford admins who want to disable this functionality the ability to do so. Since such admins might want to disable other commands such as add or dfs, it wouldn't be much trouble to allow them to do this as well. For example we could have a configuration option "hive.available.commands" (or similar) which specified add,set,delete,reset, etc by default. Then check this value in CommandProcessorFactory. It would probably make sense to add this property to the restrict list.

Issue Links

• is related to: HIVE-5879 Fix spelling errors in hive-default.xml
• relates to: HIVE-4887 sql standard auth should disable commands that impose security risk
• links to: Review Board