How to set ACL on HDFS command like -put, -get

Question

In a cluster we want to restrict the usage of HDFS commands like hdfs dfs -put -get so that the user cannot arbitrarily upload and download data between Hadoop and local OS

Is it possible? will there be any impact to other normal functions?

Thank you.

Answer 1

In your hdfs-site.xml you need to enable dfs.namenode.acls.enabled to true.

Then to use ACLs, use the commands hdfs dfs -setfacl and hdfs dfs -getacl

References

• Filesystem Shell: setfacl

• Filesystem Shell: getfacl

• HDFS Permissions Guide: ACLs (Access Control Lists)

• Performance considerations: why are HDFS ACL max_entries set to 32?