[RANGER-1368] different service on the same machine would make the shared audit local buffer directory access confilct when using hdfs to store audit log

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: 0.6.0, 0.7.0
• Component/s: audit
• Environment: linux centos 6,ranger 0.6.0
• Assignee: Unassigned
• Reporter: zhangxiong
• Created: 09/Feb/17 03:48
• Updated: 06/Mar/18 16:47
• Resolved: 06/Mar/18 16:47

Description

when configured hdfs to store ranger audit log, different service on the same machine would make the shared audit local buffer directory access confilct.
detail:
suppose that we have a server S with one hdfs NameNode NN and yarn ResourceManager RM deployed on it, and ranger configured hdfs as audit log storage backend and configured a local log buffer directory /tmp/ranger/log/ via 'xasecure.audit.hdfs.config.local.buffer.directory' .
first ,namenode started and find the directory /tmp/ranger/log/ doesn't exists, so NN created the dir with access mod 700 and continues its own work . then resourcemanager started and need to store its audit log to the already exist dir ,unfortunately RM has no access authz to the dir and cannot work well.

Issue Links

• links to: a crude solution patch to solve this issue