diff --git a/hadoop-common-project/hadoop-common/src/main/conf/hadoop-policy.xml b/hadoop-common-project/hadoop-common/src/main/conf/hadoop-policy.xml
index e1640f9754..ecda924a54 100644
--- a/hadoop-common-project/hadoop-common/src/main/conf/hadoop-policy.xml
+++ b/hadoop-common-project/hadoop-common/src/main/conf/hadoop-policy.xml
@@ -63,6 +63,16 @@
A special value of "*" means all users are allowed.
+
+ security.datanode.lifeline.protocol.acl
+ *
+ ACL for DatanodeLifelineProtocol, which is used by a
+ DataNode to send lifeline messages to the NameNode.
+ The ACL is a comma-separated list of user and group names. The user and
+ group list is separated by a blank. For e.g. "alice,bob users,wheel".
+ A special value of "*" means all users are allowed.
+
+
security.namenode.protocol.acl
*
@@ -82,6 +92,16 @@
A special value of "*" means all users are allowed.
+
+ security.get.user.mappings.protocol.acl
+ *
+ ACL for GetUserMappingsProtocol, implemented by the NameNode
+ and Job Tracker which maps users to groups.
+ The ACL is a comma-separated list of user and group names. The user and
+ group list is separated by a blank. For e.g. "alice,bob users,wheel".
+ A special value of "*" means all users are allowed.
+
+
security.refresh.user.mappings.protocol.acl
*
@@ -92,6 +112,16 @@
users are allowed.
+
+ security.reconfiguration.protocol.acl
+ *
+ ACL for ReconfigurationProtocol, used by HDFS admin to
+ reload configuration for NameNode/DataNode without restarting them.
+ The ACL is a comma-separated list of user and group names. The user and
+ group list is separated by a blank. For e.g. "alice,bob users,wheel".
+ A special value of "*" means all users are allowed.
+
+
security.refresh.policy.protocol.acl
*
@@ -102,6 +132,26 @@
A special value of "*" means all users are allowed.
+
+ security.refresh.callqueue.protocol.acl
+ *
+ ACL for RefreshCallQueueProtocol, which is used to refresh
+ the call queue in use currently.
+ The ACL is a comma-separated list of user and group names. The user and
+ group list is separated by a blank. For e.g. "alice,bob users,wheel".
+ A special value of "*" means all users are allowed.
+
+
+
+ security.refresh.generic.protocol.acl
+ *
+ ACL for GenericRefreshProtocol, which is used to refresh
+ arbitrary things at runtime.
+ The ACL is a comma-separated list of user and group names. The user and
+ group list is separated by a blank. For e.g. "alice,bob users,wheel".
+ A special value of "*" means all users are allowed.
+
+
security.ha.service.protocol.acl
*