[LU-19507] nodemap RBAC role for setting inode attributes

• Type: Improvement
• Resolution: Unresolved
• Priority: Medium
• Affects Version/s: Lustre 2.17.0
• Severity: 3
• Assignee: WC Triage
• Reporter: Andreas Dilger

Description

It would be useful to have a nodemap RBAC role to control whether the root user on a client can set clear the IMMUTABLE and APPEND_ONLY (and potentially other) inode attribute flags on files and directories. This would allow one mountpoint with the appropriate RBAC to create files that are marked immutable/append, and another mountpoint to be unable to remove the immutable/append flags from the files even as root.

This might be an alternative or complementary to the "immutable inherit" flag in LU-18679.

Issue Links

• is related to: LU-18679 Allow setting an "immutable inherit" flag on a directory