DATE=$(date +%Y%m%d)
AUDIT_FILE=”/bigdata/logs/permission_audit_${DATE}.log”

echo “=== HDFS Permission Audit ===” > ${AUDIT_FILE}
echo “Date: $(date)” >> ${AUDIT_FILE}

# 检查777权限
echo “Directories with 777 permission:” >> ${AUDIT_FILE}
hdfs dfs -ls -R /bigdata/warehouse/ | grep “drwxrwxrwx” >> ${AUDIT_FILE}

# 检查ACL配置
echo “Directories with ACL:” >> ${AUDIT_FILE}
for dir in $(hdfs dfs -ls -R /bigdata/warehouse/ | grep “^d” | awk ‘{print $NF}’); do
ACL_INFO=$(hdfs dfs -getfacl ${dir} 2>/dev/null | grep -v “^#” | grep -v “^user::” | grep -v “^group::” | grep -v “^other::”)
if [ -n “${ACL_INFO}” ]; then
echo “${dir}: ${ACL_INFO}” >> ${AUDIT_FILE}
fi
done

echo “Audit completed. Report saved to ${AUDIT_FILE}”