Details
-
Bug
-
Resolution: Fixed
-
Medium
-
None
-
None
-
3
-
9223372036854775807
Description
mdt_changelog_allow() has a check preventing "new" clients (after 2.17+) from accessing changelog if no correct credentials are provided in form of mdt_body structure.
which is not provided because llog_client_open() is used with nameless changelogs and the client can't access mdt_body buffer set after undefined name buffer:
[ 39.512638] LustreError: 8576:0:(llog_cat.c:395:llog_cat_id2handle()) lustre-MDT0000-mdc-ffff8d05dc1a4000: error opening log id [0x1:0xa:0x0]: rc = -13 [ 39.513001] Lustre: 8576:0:(llog_cat.c:839:llog_cat_process_common()) lustre-MDT0000-mdc-ffff8d05dc1a4000: can't find llog handle [0x1:0xa:0x0]: rc = -13 [ 39.513395] LustreError: 8576:0:(mdc_changelog.c:326:chlg_load()) lustre-MDT0000-mdc-ffff8d05dc1a4000: fail to process llog: rc = -13
This causes sanity test_160a to fail:
lfs changelog: cannot access changelog: Permission denied sanity test_160a: @@@@@@ FAIL: MKDIR changelog mask count 0 != 1
Attachments
Issue Links
- is related to
-
LU-19864 sanity-sec/35: Check permissions when accessing changelogs LBUG
-
- Resolved
-
- is related to
-
LU-13064 Check permissions when accessing changelogs
-
- Resolved
-
- mentioned in
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...