[NIFI-7885] Add global property for LFS access from HDFS processors

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.12.1
• Fix Version/s: 1.13.0
• Component/s: Configuration, Core Framework, Extensions
• Labels: file-system permission properties security validation
• Assignee: David Handermann
• Reporter: Andy LoPresto
• Created: 05/Oct/20 20:42
• Updated: 09/Dec/20 14:30
• Resolved: 09/Dec/20 14:30

Description

From https://issues.apache.org/jira/browse/NIFI-7884:

This will also require introducing a global setting in nifi.properties that an admin can set to allow local file system access via the HDFS processors (default true for backward compatibility), and additional validation logic in the HDFS processors (ideally the abstract shared logic) to ensure that if this setting is disabled, the HDFS processors are not accessing the local file system via the file:/// protocol in their configuration.

Issue Links

• links to: GitHub Pull Request #4712