[LU-17049] Check supplementary groups for "enable_*_gid" settings

• Type: Improvement
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.18.0
• Affects Version/s: Lustre 2.16.0, Lustre 2.12.9
• Labels: easy
• Severity: 3
• Assignee: Andreas Dilger
• Reporter: Andreas Dilger

Description

The "mdt.*.enable_remote_dir_gid" parameter is intended to keep advanced functionality out of the hands of users that might abuse them. Typically this is "0" (root only) or "-1" (all users), but it is possible to set a numeric GID to allow sysadmins in a "wheel" or "admin" group to access this functionality on behalf of users.

However, it appears that the code that is checking this parameter is only checking the primary GID of the RPC against the parameter, instead of using "lustre_in_group_p()" to check all of the supplementary groups of the user, if it is not the primary one.

Issue Links

• is related to: LU-19712 Add ability for admins to pin files into Pool