云计算课程实验
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

135 lines
3.4 KiB

преди 4 години
  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <!--
  3. Licensed under the Apache License, Version 2.0 (the "License");
  4. you may not use this file except in compliance with the License.
  5. You may obtain a copy of the License at
  6. http://www.apache.org/licenses/LICENSE-2.0
  7. Unless required by applicable law or agreed to in writing, software
  8. distributed under the License is distributed on an "AS IS" BASIS,
  9. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  10. See the License for the specific language governing permissions and
  11. limitations under the License.
  12. -->
  13. <configuration>
  14. <!-- This file is hot-reloaded when it changes -->
  15. <!-- KMS ACLs -->
  16. <property>
  17. <name>hadoop.kms.acl.CREATE</name>
  18. <value>*</value>
  19. <description>
  20. ACL for create-key operations.
  21. If the user is not in the GET ACL, the key material is not returned
  22. as part of the response.
  23. </description>
  24. </property>
  25. <property>
  26. <name>hadoop.kms.acl.DELETE</name>
  27. <value>*</value>
  28. <description>
  29. ACL for delete-key operations.
  30. </description>
  31. </property>
  32. <property>
  33. <name>hadoop.kms.acl.ROLLOVER</name>
  34. <value>*</value>
  35. <description>
  36. ACL for rollover-key operations.
  37. If the user is not in the GET ACL, the key material is not returned
  38. as part of the response.
  39. </description>
  40. </property>
  41. <property>
  42. <name>hadoop.kms.acl.GET</name>
  43. <value>*</value>
  44. <description>
  45. ACL for get-key-version and get-current-key operations.
  46. </description>
  47. </property>
  48. <property>
  49. <name>hadoop.kms.acl.GET_KEYS</name>
  50. <value>*</value>
  51. <description>
  52. ACL for get-keys operations.
  53. </description>
  54. </property>
  55. <property>
  56. <name>hadoop.kms.acl.GET_METADATA</name>
  57. <value>*</value>
  58. <description>
  59. ACL for get-key-metadata and get-keys-metadata operations.
  60. </description>
  61. </property>
  62. <property>
  63. <name>hadoop.kms.acl.SET_KEY_MATERIAL</name>
  64. <value>*</value>
  65. <description>
  66. Complementary ACL for CREATE and ROLLOVER operations to allow the client
  67. to provide the key material when creating or rolling a key.
  68. </description>
  69. </property>
  70. <property>
  71. <name>hadoop.kms.acl.GENERATE_EEK</name>
  72. <value>*</value>
  73. <description>
  74. ACL for generateEncryptedKey CryptoExtension operations.
  75. </description>
  76. </property>
  77. <property>
  78. <name>hadoop.kms.acl.DECRYPT_EEK</name>
  79. <value>*</value>
  80. <description>
  81. ACL for decryptEncryptedKey CryptoExtension operations.
  82. </description>
  83. </property>
  84. <property>
  85. <name>default.key.acl.MANAGEMENT</name>
  86. <value>*</value>
  87. <description>
  88. default ACL for MANAGEMENT operations for all key acls that are not
  89. explicitly defined.
  90. </description>
  91. </property>
  92. <property>
  93. <name>default.key.acl.GENERATE_EEK</name>
  94. <value>*</value>
  95. <description>
  96. default ACL for GENERATE_EEK operations for all key acls that are not
  97. explicitly defined.
  98. </description>
  99. </property>
  100. <property>
  101. <name>default.key.acl.DECRYPT_EEK</name>
  102. <value>*</value>
  103. <description>
  104. default ACL for DECRYPT_EEK operations for all key acls that are not
  105. explicitly defined.
  106. </description>
  107. </property>
  108. <property>
  109. <name>default.key.acl.READ</name>
  110. <value>*</value>
  111. <description>
  112. default ACL for READ operations for all key acls that are not
  113. explicitly defined.
  114. </description>
  115. </property>
  116. </configuration>