Uploaded image for project: 'Lustre'
  1. Lustre
  2. LU-11850

Relocating /proc/fs/lustre/ost to /sys/kernel/debug/lustre/ost prevents non-root access

Details

    • Bug
    • Resolution: Unresolved
    • Minor
    • Upstream
    • Lustre 2.12.0
    • 3
    • 9223372036854775807

    Description

      For security reasons /sys/kernel/debug is restrict to root only so by relocating /proc/fs/lustre/ost & mdt to /sys/kenrnel/debug/lustre breaks many tools such as 'performance co pilot" that run as non-privilege users. We rely on such tools to collect lustre metric.

      We could change the permissions on /sys/kernel/debug but that is not good security practice. Can there be a build option to selected the location?

      Attachments

        Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. LU-11988 Some lctl *_param values only readable by root

          • Major - Major loss of function.
          • Resolved
          is related to

          Bug - A problem which impairs or prevents the functions of the product. LU-11988 Some lctl *_param values only readable by root

          • Major - Major loss of function.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-12244 lfs check subcommand no longer works as non-root user

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-12513 Address YAML limitations

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-17471 Add symlink /proc/fs/lustre/osd-*/*/brw_stats to /sys/kernel/debug/lustre/osd-*/*/brw_stats

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. LU-18709 High frequency performance counters accessible to non-root users

          • Major - Major loss of function.
          • Open

          Improvement - An improvement or enhancement to an existing feature or task. LU-12841 Add ability for lctl get_param to get subfield of YAML output

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Open

          Improvement - An improvement or enhancement to an existing feature or task. LU-16164 Check params and make them valid YAML if they are designed to be

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Open

          Improvement - An improvement or enhancement to an existing feature or task. LU-17472 Create programming wrappers (python, go) for liblustreapi Netlink stats API

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Open
          is related to

          Improvement - An improvement or enhancement to an existing feature or task. LU-8066 Move lustre procfs handling to sysfs and debugfs.

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Open

          Improvement - An improvement or enhancement to an existing feature or task. LU-9680 Improve the user land to kernel space interface for lustre

          • Major - Major loss of function.
          • In Progress

          Activity

            [LU-11850] Relocating /proc/fs/lustre/ost to /sys/kernel/debug/lustre/ost prevents non-root access
            simmonsja James A Simmons made changes -
            Link New: This issue is related to LU-16164 [ LU-16164 ]
            simmonsja James A Simmons made changes -
            Link New: This issue is related to LU-18709 [ LU-18709 ]
            jtacquaviva Jean-Thomas Acquaviva made changes -
            Attachment New: log_stats.txt [ 54273 ]
            simmonsja James A Simmons made changes -
            Link New: This issue is related to LU-17472 [ LU-17472 ]
            simmonsja James A Simmons made changes -
            Link New: This issue is related to LU-17471 [ LU-17471 ]
            simmonsja James A Simmons made changes -
            Status Original: Open [ 1 ] New: In Progress [ 3 ]
            Maxence Joulin Maxence Joulin (Inactive) made changes -
            Link New: This issue is related to DDN-4647 [ DDN-4647 ]
            adilger Andreas Dilger made changes -
            Summary Original: Relocating /proc/fs/lustre/ost to /sys/kenrnel/debug/lustre/ost prevents non-root access New: Relocating /proc/fs/lustre/ost to /sys/kernel/debug/lustre/ost prevents non-root access
            pjones Peter Jones made changes -
            Link New: This issue is related to DDN-2216 [ DDN-2216 ]
            simmonsja James A Simmons made changes -
            Link New: This issue is related to LU-12841 [ LU-12841 ]

            People

              simmonsja James A Simmons
              mhanafi Mahmoud Hanafi
              Votes:
              1 Vote for this issue
              Watchers:
              17 Start watching this issue

              Dates

                Created:
                Updated: