[LU-14479] lgss_sk may load keys with incorrect permissions Created: 02/Mar/21 Updated: 04/Dec/21 Resolved: 30/Mar/21 |
|
| Status: | Resolved |
| Project: | Lustre |
| Component/s: | None |
| Affects Version/s: | Lustre 2.15.0 |
| Fix Version/s: | Lustre 2.15.0 |
| Type: | Bug | Priority: | Minor |
| Reporter: | Sebastien Buisson | Assignee: | Sebastien Buisson |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | SSK, sec | ||
| Issue Links: |
|
||||
| Severity: | 3 | ||||
| Rank (Obsolete): | 9223372036854775807 | ||||
| Description |
|
In autotest, we are used to running the following command after SSK keys have been loaded into the keyring via lgss_sk -l: # keyctl show | grep lustre | cut -c1-11 | sed -e 's/ //g;' | xargs -IX keyctl setperm X 0x3f3f3f3f We might look into options so that lgss_sk correctly sets the permissions by itself. |
| Comments |
| Comment by Jeremy Filizetti [ 02/Mar/21 ] |
|
Its probably plenty of oversight on my part, but are things getting loaded with the wrong permissions under certain circumstances? |
| Comment by Sebastien Buisson [ 02/Mar/21 ] |
|
Well, we could rephrase that as "Sometimes the key are loaded with incorrect permissions". What I have not identified yet are the circumstances leading to incorrect permissions: system environment? distro? etc. |
| Comment by Gerrit Updater [ 08/Mar/21 ] |
|
Sebastien Buisson (sbuisson@ddn.com) uploaded a new patch: https://review.whamcloud.com/41929 |
| Comment by Gerrit Updater [ 30/Mar/21 ] |
|
Oleg Drokin (green@whamcloud.com) merged in patch https://review.whamcloud.com/41929/ |
| Comment by Peter Jones [ 30/Mar/21 ] |
|
Landed for 2.15 |