[LU-18694] Nodemap local root user capabilities

• Type: Improvement
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.17.0
• Affects Version/s: Lustre 2.17.0
• Labels: patch sec
• Severity: 3
• Assignee: Sebastien Buisson
• Reporter: Sebastien Buisson

Description

It could be interesting to map the local root user to a non-privileged storage UID (so similar to admin=0 with an idmap rule), but also treat it as a special case from every other 'standard' local UID, so that this local root user can be granted some subset of the 'root' user capabilities.

Comments

[Peter Jones]

Merged for 2.17

[Gerrit Updater]

"Oleg Drokin <[e-mail]>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/57966/
Subject: LU-18694 sec: nodemap local root user capabilities
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: f7495bc57f4873db2760fbe6a2c36e3ce8ef546d

[Gerrit Updater]

"Sebastien Buisson <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/57995
Subject: LU-18694 dbg: debug test_64h
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: bbc05a0c9414b7fc3273e6653f77a1d639254cc8

[Gerrit Updater]

"Sebastien Buisson <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/57966
Subject: LU-18694 sec: nodemap local root user capabilities
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 603e17aa5285f014737401bb0cf1a3c6cfe1fc2e