https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-17049 Lustre <p>The "<tt>mdt.&#42;.enable_remote_dir_gid</tt>" parameter is intended to keep advanced functionality out of the hands of users that might abuse them. Typically this is "<tt>0</tt>" (root only) or "<tt>-1</tt>" (all users), but it is possible to set a numeric GID to allow sysadmins in a "<tt>wheel</tt>" or "<tt>admin</tt>" group to access this functionality on behalf of users. </p> <p>However, it appears that the code that is checking this parameter is only checking the primary GID of the RPC against the parameter, instead of using "<tt>lustre_in_group_p()</tt>" to check all of the supplementary groups of the user, if it is not the primary one.</p> LU-17049

Check supplementary groups for "enable_*_gid" settings

Improvement Minor Open Unresolved WC Triage Andreas Dilger easy Wed, 23 Aug 2023 18:12:16 +0000 Thu, 24 Aug 2023 05:05:48 +0000 Lustre 2.16.0 Lustre 2.12.9 0 2 <p>"Andreas Dilger &lt;adilger@whamcloud.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52063" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52063</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17049" title="Check supplementary groups for &quot;enable_*_gid&quot; settings" class="issue-link" data-issue-key="LU-17049">LU-17049</a> mdt: check all groups for lfs mkdir<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 14d981f691a4340026e5874582ed2ef75a3cb09d</p> Related Development Rank 1|i03tqf: Rank (Obsolete) 9223372036854775807 Severity