Uploaded image for project: 'Lustre'
  1. Lustre
  2. LU-13791

Capabilities are not effective

Details

    • 3
    • 9223372036854775807

    Description

      Historically, the capabilities from client requests are dropped if current user is not root, but with permission check moving to MDD (from client and bottom FS), the capabilities should be kept to allow them take effect.

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. LU-18200 ll_setattr_raw does not account for noninitial linux namespaces

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Open

          Bug - A problem which impairs or prevents the functions of the product. LU-6528 permission denied over NFS (intermittent

          • Major - Major loss of function.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-7630 permission denied over NFS

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. LU-17410 Add per-nodemap capabilities mask

          • Major - Major loss of function.
          • Open

          Activity

            [LU-13791] Capabilities are not effective
            gerrit Gerrit Updater added a comment -

            "Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/54118/
            Subject: LU-13791 mdt: allow using symbolic capability names
            Project: fs/lustre-release
            Branch: master
            Current Patch Set:
            Commit: 0b0e9162e26216da8f79f9e970c7c9ce38949b16

            gerrit Gerrit Updater added a comment - "Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/54118/ Subject: LU-13791 mdt: allow using symbolic capability names Project: fs/lustre-release Branch: master Current Patch Set: Commit: 0b0e9162e26216da8f79f9e970c7c9ce38949b16
            gerrit Gerrit Updater added a comment -

            "Andreas Dilger <adilger@whamcloud.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/54118
            Subject: LU-13791 mdt: allow using symbolic capability names
            Project: fs/lustre-release
            Branch: master
            Current Patch Set: 1
            Commit: 9d9cdab97962de06cd28ae2ec122950df5409087

            gerrit Gerrit Updater added a comment - "Andreas Dilger <adilger@whamcloud.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/54118 Subject: LU-13791 mdt: allow using symbolic capability names Project: fs/lustre-release Branch: master Current Patch Set: 1 Commit: 9d9cdab97962de06cd28ae2ec122950df5409087
            gerrit Gerrit Updater added a comment -

            "Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/53538/
            Subject: LU-13791 mdt: parameter to tune capabilities
            Project: fs/lustre-release
            Branch: master
            Current Patch Set:
            Commit: 54f677651b9a88a72c762f3a30d063db7d5f87c2

            gerrit Gerrit Updater added a comment - "Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/53538/ Subject: LU-13791 mdt: parameter to tune capabilities Project: fs/lustre-release Branch: master Current Patch Set: Commit: 54f677651b9a88a72c762f3a30d063db7d5f87c2
            gerrit Gerrit Updater added a comment -

            "Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/53539/
            Subject: LU-13791 mdt: parameter to tune capabilities
            Project: fs/lustre-release
            Branch: b2_15
            Current Patch Set:
            Commit: 5c6084227ec453f4e68617407d16e76812d8cbb4

            gerrit Gerrit Updater added a comment - "Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/53539/ Subject: LU-13791 mdt: parameter to tune capabilities Project: fs/lustre-release Branch: b2_15 Current Patch Set: Commit: 5c6084227ec453f4e68617407d16e76812d8cbb4
            gerrit Gerrit Updater added a comment -

            "Andreas Dilger <adilger@whamcloud.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/53539
            Subject: LU-13791 mdt: parameter to tune capabilities
            Project: fs/lustre-release
            Branch: b2_15
            Current Patch Set: 1
            Commit: 5b07c5a358364c7208ae4fbca6c53c3d2c0e8751

            gerrit Gerrit Updater added a comment - "Andreas Dilger <adilger@whamcloud.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/53539 Subject: LU-13791 mdt: parameter to tune capabilities Project: fs/lustre-release Branch: b2_15 Current Patch Set: 1 Commit: 5b07c5a358364c7208ae4fbca6c53c3d2c0e8751
            gerrit Gerrit Updater added a comment -

            "Andreas Dilger <adilger@whamcloud.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/53538
            Subject: LU-13791 mdt: parameter to tune capabilities
            Project: fs/lustre-release
            Branch: master
            Current Patch Set: 1
            Commit: 2f36002f4a096cc50712b441d6271219b7170b0f

            gerrit Gerrit Updater added a comment - "Andreas Dilger <adilger@whamcloud.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/53538 Subject: LU-13791 mdt: parameter to tune capabilities Project: fs/lustre-release Branch: master Current Patch Set: 1 Commit: 2f36002f4a096cc50712b441d6271219b7170b0f
            pjones Peter Jones added a comment -

            Landed for 2.14

            pjones Peter Jones added a comment - Landed for 2.14
            gerrit Gerrit Updater added a comment -

            Oleg Drokin (green@whamcloud.com) merged in patch https://review.whamcloud.com/39399/
            Subject: LU-13791 sec: enable FS capabilities
            Project: fs/lustre-release
            Branch: master
            Current Patch Set:
            Commit: f05edf8e2b92e2c018aad130cd7a1dcc00a8eeee

            gerrit Gerrit Updater added a comment - Oleg Drokin (green@whamcloud.com) merged in patch https://review.whamcloud.com/39399/ Subject: LU-13791 sec: enable FS capabilities Project: fs/lustre-release Branch: master Current Patch Set: Commit: f05edf8e2b92e2c018aad130cd7a1dcc00a8eeee
            gerrit Gerrit Updater added a comment -

            Lai Siyao (lai.siyao@whamcloud.com) uploaded a new patch: https://review.whamcloud.com/39399
            Subject: LU-13791 security: enable capabilities
            Project: fs/lustre-release
            Branch: master
            Current Patch Set: 1
            Commit: b1b4adad2c590fb875e5593647ff95198e3e20d1

            gerrit Gerrit Updater added a comment - Lai Siyao (lai.siyao@whamcloud.com) uploaded a new patch: https://review.whamcloud.com/39399 Subject: LU-13791 security: enable capabilities Project: fs/lustre-release Branch: master Current Patch Set: 1 Commit: b1b4adad2c590fb875e5593647ff95198e3e20d1

            People

              laisiyao Lai Siyao
              laisiyao Lai Siyao
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: