[ 
https://issues.apache.org/jira/browse/HDFS-5523?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14364259#comment-14364259
 ] 

Brandon Li commented on HDFS-5523:
----------------------------------

{quote}We should probably disallow nesting in this phase.{quote}
Sounds ok to me. Otherwise, it would be hard to decide the access mode, for 
example: export /a is read-only but /a/b is read-write, when user traverse from 
/a to /a/b, it's tricky to decide which access the user should have. 

{quote}I think we should allow mounting a non-top-level directory.{quote}
In this case, we can have root as the only mount point and the users can mount 
any sub-directory. This might be the easiest way to implement, but provide only 
marginal security provision. Users can mount any sub-directories  as long as he 
has the right to do mount operation. Usually a root user is needed to do mount, 
so if customers' environment has control over who can do mount, then this 
option is viable solution. Of course, to add a bit more security control, the 
user can choose to export multiple sub-directories instead of only root.


> Support multiple subdirectory exports in HDFS NFS gateway 
> ----------------------------------------------------------
>
>                 Key: HDFS-5523
>                 URL: https://issues.apache.org/jira/browse/HDFS-5523
>             Project: Hadoop HDFS
>          Issue Type: New Feature
>          Components: nfs
>            Reporter: Brandon Li
>
> Currently, the HDFS NFS Gateway only supports configuring a single 
> subdirectory export via the  {{dfs.nfs3.export.point}} configuration setting. 
> Supporting multiple subdirectory exports can make data and security 
> management easier when using the HDFS NFS Gateway.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to