[LU-1518] Missing/bad operations in mdd_{obf,dot_lustre}_obj_op causing LBUGs

• Type: Bug
• Resolution: Fixed
• Priority: Blocker
• Fix Version/s: Lustre 2.3.0, Lustre 2.4.0, Lustre 2.1.4
• Affects Version/s: Lustre 2.3.0, Lustre 2.1.2, Lustre 2.1.3
• Labels: fid
• Severity: 3
• Assignee: Niu Yawei (Inactive)
• Reporter: John Hammond

Description

An unprivileged user can cause an MDS LBUG by issuing "chmod +x /mnt/lustre/.lustre/fid". Similarly root can cause an LBUG by issuing

{get,set}

facl calls against this directory. Privileged users cannot changes the attributes of /mnt/lustre/.lustre.

Issue Links

• is related to: LU-1777 open-by-fid: deadlock in lock_rename()
• is related to: LU-2780 Use real inode for .lustre/fid
• is related to: LU-1549 open-unlinked files are accessible through the PENDING directory
• is related to: LU-1550 open-by-fid getdents may return inconsistend data
• is related to: LU-1553 inaccessible files in .lustre
• is related to: LU-1552 opening lost+found: triggers (mdt_open.c:784:mdt_finish_open()) ASSERTION( ma->ma_valid & MA_INODE ) failed:
• is related to: LU-1532 only allow FID_SEQ_NORMAL from clients
• is related to: LU-1531 Accessing .lustre/fid/[0x1:0x0:0x0] triggers LBUG in osd_compat_objid_lookup()

Comments

[Peter Jones]

ok - thanks John!

[John Hammond]

Hi Peter,

I believe that most of the related issues have been addressed and will verify exactly which. However 1777 has not been addresses by the patch and should probably be changed from a duplicate of this issue to an open issue.

Thanks,

John

[Peter Jones]

Landed for 2.3 and 2.4. If any more edge cases are found let's track them under a new ticket

[Peter Jones]

Niu is working on this now

[Bob Glossman (Inactive)]

John, Thanks for pointing me at your sys_ tests. I had no problem cloning your git & building the tiny tests. That should make it a bit easier to exactly reproduce your results.

[John Hammond]

Thanks Bob.

I pushed the commands I used in bug-notes to https://github.com/jhammond/sys. There all pretty simple and you can probably get by without them. But they are useful in that they do what it says on the can, whereas mv, ln, or ls do a lot of stating end up doing different things depending on the types of their operands, whether you added a trailing slash, and so on.

[Bob Glossman (Inactive)]

additional revisions fixed LBUGs seen in sys_rename XXX .lustre/fid and sys_rename .lustre/fid XXX. still working on other issues in bug-notes attachment.

[John Hammond]

sys_rename is an imaginary command that only calls rename(argv[1], argv[2]).

[root]# cd /mnt/lustre/
[root]# mkdir XXX
[root]# man mv
[root]# mv --no-target-directory XXX .lustre/fid

[Bob Glossman (Inactive)]

sys_mkdir? sys_rename? what are these?

I can't reproduce this with ordinary cmds:

[root@centos26 ~]# cd /mnt/lustre
[root@centos26 lustre]# mkdir XXX
[root@centos26 lustre]# rename XXX .lustre/fid
[root@centos26 lustre]#

No LBUG, no pointer dereference seen.

[John Hammond]

Results of some poking after Bob's lu1518.setattr.patch from Aug 21 2012.