[LU-13791] Capabilities are not effective Created: 16/Jul/20  Updated: 03/Jan/24  Resolved: 13/Aug/20

Status: Resolved
Project: Lustre
Component/s: None
Affects Version/s: Lustre 2.10.0, Lustre 2.12.0, Lustre 2.13.0
Fix Version/s: Lustre 2.14.0

Type: Bug Priority: Minor
Reporter: Lai Siyao Assignee: Lai Siyao
Resolution: Fixed Votes: 0
Labels: security

Issue Links:
Related
is related to LU-6528 permission denied over NFS (intermittent Resolved
is related to LU-7630 permission denied over NFS Resolved
Severity: 3
Rank (Obsolete): 9223372036854775807

 Description   

Historically, the capabilities from client requests are dropped if current user is not root, but with permission check moving to MDD (from client and bottom FS), the capabilities should be kept to allow them take effect.



 Comments   
Comment by Gerrit Updater [ 16/Jul/20 ]

Lai Siyao (lai.siyao@whamcloud.com) uploaded a new patch: https://review.whamcloud.com/39399
Subject: LU-13791 security: enable capabilities
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: b1b4adad2c590fb875e5593647ff95198e3e20d1

Comment by Gerrit Updater [ 13/Aug/20 ]

Oleg Drokin (green@whamcloud.com) merged in patch https://review.whamcloud.com/39399/
Subject: LU-13791 sec: enable FS capabilities
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: f05edf8e2b92e2c018aad130cd7a1dcc00a8eeee

Comment by Peter Jones [ 13/Aug/20 ]

Landed for 2.14

Comment by Gerrit Updater [ 22/Dec/23 ]

"Andreas Dilger <adilger@whamcloud.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/53538
Subject: LU-13791 mdt: parameter to tune capabilities
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 2f36002f4a096cc50712b441d6271219b7170b0f

Comment by Gerrit Updater [ 22/Dec/23 ]

"Andreas Dilger <adilger@whamcloud.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/53539
Subject: LU-13791 mdt: parameter to tune capabilities
Project: fs/lustre-release
Branch: b2_15
Current Patch Set: 1
Commit: 5b07c5a358364c7208ae4fbca6c53c3d2c0e8751

Comment by Gerrit Updater [ 23/Dec/23 ]

"Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/53539/
Subject: LU-13791 mdt: parameter to tune capabilities
Project: fs/lustre-release
Branch: b2_15
Current Patch Set:
Commit: 5c6084227ec453f4e68617407d16e76812d8cbb4

Comment by Gerrit Updater [ 03/Jan/24 ]

"Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/53538/
Subject: LU-13791 mdt: parameter to tune capabilities
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 54f677651b9a88a72c762f3a30d063db7d5f87c2

Generated at Sat Feb 10 03:04:14 UTC 2024 using Jira 9.4.14#940014-sha1:734e6822bbf0d45eff9af51f82432957f73aa32c.