[LU-13064] Check permissions when accessing changelogs

• Type: Bug
• Resolution: Fixed
• Priority: Major
• Fix Version/s: Lustre 2.14.0
• Labels: LTS12 patch sec
• Severity: 3
• Assignee: Sebastien Buisson
• Reporter: Sebastien Buisson

Description

root permissions should be checked when reading or clearing changelogs from clients. In particular, if root is squashed via a nodemap entry, it should not be allowed to access changelogs.

I will push a patch to implement this check.

Comments

[Peter Jones]

Landed for 2.14

[Gerrit Updater]

Oleg Drokin ([e-mail]) merged in patch https://review.whamcloud.com/36990/
Subject: LU-13064 sec: check permissions for changelogs access
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 4e8fcee92d75102314f6c39c72b9c2cbce109bd4

[Gerrit Updater]

Sebastien Buisson ([e-mail]) uploaded a new patch: https://review.whamcloud.com/36990
Subject: LU-13064 sec: check permissions for changelogs access
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: e43bcae1c1493bff1ffb21bd3c3c042288581512

[Gerrit Updater]

Sebastien Buisson ([e-mail]) uploaded a new patch: https://review.whamcloud.com/36989
Subject: LU-13064 sec: reserve flag for changelogs permissions
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 9a559136555b7f016cf585d07bd447ccf751265d