Local file system access
Learn how to prevent access to the local file system.
The Hadoop processors such as the HDFS and Hive processors, (processors where some core-site, hdfs-site, XML configuration files are required) could theoretically be used, with very specifically tailored configurations, to access the local file system where NiFi is running.
In order to prevent access to the local file system, set the following environment variable in the nifi-env.sh file:
By default, this variable is set to false. Setting this value to true forces the Hadoop processors to evaluate the file system being accessed during scheduling and deny access in case it tries to access the local file system.