Local file system access

Learn how to prevent access to the local file system.

The Hadoop processors such as the HDFS and Hive processors, (processors where some core-site, hdfs-site, XML configuration files are required) could theoretically be used, with very specifically tailored configurations, to access the local file system where NiFi is running.

In order to prevent access to the local file system, set the following environment variable in the nifi-env.sh file:

export NIFI_HDFS_DENY_LOCAL_FILE_SYSTEM_ACCESS=false 

By default, this variable is set to false. Setting this value to true forces the Hadoop processors to evaluate the file system being accessed during scheduling and deny access in case it tries to access the local file system.