Uploaded image for project: 'Hadoop HDFS'
  1. Hadoop HDFS
  2. HDFS-15850

Superuser actions should be reported to external enforcers

VotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Reviewed

    Description

      Currently, HDFS superuser checks or actions are not reported to external enforcers like Ranger and the audit report provided by such external enforces are not complete and are missing the superuser actions. To fix this, add a new method to "AccessControlEnforcer" for all superuser checks. 

      Attachments

        1. HDFS-15850.v1.patch
          27 kB
          Vivek Ratnavel Subramanian
        2. HDFS-15850.v2.patch
          28 kB
          Vivek Ratnavel Subramanian
        3. HDFS-15850.branch-3.3.001.patch
          41 kB
          Stephen O'Donnell

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            vivekratnavel Vivek Ratnavel Subramanian
            vivekratnavel Vivek Ratnavel Subramanian
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 5h 10m
                5h 10m

                Slack

                  Issue deployment