-
Notifications
You must be signed in to change notification settings - Fork 9.2k
HDFS-15353. Use sudo instead of su to allow nologin user for secure DataNode #2018
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
💔 -1 overall
This message was automatically generated. |
|
Hi @2k0ri, would you fix or ignore shellcheck warnings? https://builds.apache.org/job/hadoop-multibranch/job/PR-2018/1/artifact/out/diff-patch-shellcheck.txt Before this fix, su command redirected the ulimit output by root user. Therefore the behavior is not changed and I think we can ignore this warning. |
|
💔 -1 overall
This message was automatically generated. |
|
LGTM, +1 pending Jenkins. In the precommit job, docker build failed due to unstable internet connection. Kicked https://builds.apache.org/job/hadoop-multibranch/job/PR-2018/3/console |
|
💔 -1 overall
This message was automatically generated. |
|
+1, thank you @2k0ri |
JIRA: https://issues.apache.org/jira/browse/HDFS-15353
This PR changes privilege escalation from su to sudo in hadoop-functions.sh.
It allows launching secure DataNode by a
--disabled-login(eg./sbin/nologin) user.