Help Center/ MapReduce Service/ Component Operation Guide (LTS)/ Using HDFS/ HDFS User Permission Management/ Configuring HDFS Directory Permission
Updated on 2024-10-09 GMT+08:00
View PDF
Share

Configuring HDFS Directory Permission

Scenario

The permission for some HDFS directories is 777 or 750 by default, which brings potential security risks. You are advised to modify the permission for the HDFS directories after the HDFS is installed to increase user security.

Procedure

Log in to the HDFS client as the administrator and run the following command to modify the permission for the /user directory.

The permission is set to 1777, that is, 1 is added to the original permission. This indicates that only the user who creates the directory can delete it.

hdfs dfs -chmod 1777 /user

To ensure security of the system file, you are advised to harden the security for non-temporary directories. The following directories are examples:

  • /user:777
  • /mr-history:777
  • /mr-history/tmp:777
  • /mr-history/done:777
  • /user/mapred:755