[ https://issues.apache.org/jira/browse/HDFS-5523?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14364259#comment-14364259 ]
Brandon Li commented on HDFS-5523: ---------------------------------- {quote}We should probably disallow nesting in this phase.{quote} Sounds ok to me. Otherwise, it would be hard to decide the access mode, for example: export /a is read-only but /a/b is read-write, when user traverse from /a to /a/b, it's tricky to decide which access the user should have. {quote}I think we should allow mounting a non-top-level directory.{quote} In this case, we can have root as the only mount point and the users can mount any sub-directory. This might be the easiest way to implement, but provide only marginal security provision. Users can mount any sub-directories as long as he has the right to do mount operation. Usually a root user is needed to do mount, so if customers' environment has control over who can do mount, then this option is viable solution. Of course, to add a bit more security control, the user can choose to export multiple sub-directories instead of only root. > Support multiple subdirectory exports in HDFS NFS gateway > ---------------------------------------------------------- > > Key: HDFS-5523 > URL: https://issues.apache.org/jira/browse/HDFS-5523 > Project: Hadoop HDFS > Issue Type: New Feature > Components: nfs > Reporter: Brandon Li > > Currently, the HDFS NFS Gateway only supports configuring a single > subdirectory export via the {{dfs.nfs3.export.point}} configuration setting. > Supporting multiple subdirectory exports can make data and security > management easier when using the HDFS NFS Gateway. -- This message was sent by Atlassian JIRA (v6.3.4#6332)