-
Improvement
-
Resolution: Unresolved
-
Medium
-
None
-
Lustre 2.17.0
-
None
-
3
-
9223372036854775807
It would be useful to have a nodemap RBAC role to control whether the root user on a client can set clear the IMMUTABLE and APPEND_ONLY (and potentially other) inode attribute flags on files and directories. This would allow one mountpoint with the appropriate RBAC to create files that are marked immutable/append, and another mountpoint to be unable to remove the immutable/append flags from the files even as root.
This might be an alternative or complementary to the "immutable inherit" flag in LU-18679.