[LU-7264] store ChangeLog record for security.* xattr changes Created: 07/Oct/15  Updated: 17/Dec/16  Resolved: 17/Dec/16

Status: Resolved
Project: Lustre
Component/s: None
Affects Version/s: Lustre 2.8.0
Fix Version/s: Lustre 2.10.0

Type: Improvement Priority: Major
Reporter: Andreas Dilger Assignee: Henri Doreau (Inactive)
Resolution: Fixed Votes: 0
Labels: easy

Issue Links:
Related
is related to LU-6886 declare changelog store for POSIX ACL... Resolved
Rank (Obsolete): 9223372036854775807

 Description   

After looking at the patch http://review.whamcloud.com/15660 "LU-6886 mdd: declare changelog store for POSIX ACLs" Oleg and I thought that there should also be ChangeLog records for security.* xattr changes as a form of audit and tracking potential permission changes.



 Comments   
Comment by Andreas Dilger [ 07/Oct/15 ]

Is there a need for storing the security.* xattrs, or is that not appropriate for ChangeLog users?

Should the code that decides which xattrs types to add to the ChangeLog in mdd_xattr_set() and mdd_xattr_del() and their *_declare() functions be abstracted into a helper function like mdd_xattr_needs_changelog() or similar so that we don't have multiple checks spread throughout the code? Otherwise, as LU-6886 showed, it seems too easy that these checks will again become inconsistent in the future. It is already true that mdd_declare_xattr_set() calls mdd_declare_changelog_store() for every xattr type, but mdd_xattr_set() only records specific xattrs into the ChangeLog. While not harmful, this adds unnecessary overhead to the transaction and would also be fixed by unifying the checks for which xattr changes are being logged.

Comment by Henri Doreau (Inactive) [ 08/Oct/15 ]

It would definitely be valuable to have changelog records for security.*, trusted.*, user.* (already in place) and system.* (i.e. everything but lustre-specific xattrs). The list of desired classes could be controlled from a procfs entry (similar to the changelog mask).

Comment by Henri Doreau (Inactive) [ 23/Sep/16 ]

Patch: http://review.whamcloud.com/#/c/22697/

Comment by Gerrit Updater [ 17/Dec/16 ]

Oleg Drokin (oleg.drokin@intel.com) merged in patch https://review.whamcloud.com/22697/
Subject: LU-7264 mdd: refactor changelog handling for XATTR ops
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 9ef9c5f9f0ceeaaaac018702286c0c23a8eb5d4b

Comment by Peter Jones [ 17/Dec/16 ]

Landed for 2.10

Generated at Sat Feb 10 02:07:24 UTC 2024 using Jira 9.4.14#940014-sha1:734e6822bbf0d45eff9af51f82432957f73aa32c.