https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-532 Lustre <p>There seems to be a problem with user_xattr when using 1.8.6-wc1 client with <br/> newest lustre-master build:</p> <p>cd /mnt/lustre/scratch/people/b14flis<br/> touch test</p> <p>mv test /tmp</p> <p>mv: getting attribute `trusted.lma' of `trusted.lma': Operation not permitted<br/> mv: getting attribute `trusted.link' of `trusted.link': Operation not permitted<br/> mv: getting attribute `trusted.lov' of `trusted.lov': Operation not permitted<br/> mv: getting attribute `trusted.lma' of `trusted.lma': Operation not permitted<br/> mv: getting attribute `trusted.link' of `trusted.link': Operation not permitted<br/> mv: getting attribute `trusted.lov' of `trusted.lov': Operation not permitted</p> <p>strace dump:<br/> ...<br/> fgetxattr(3, "trusted.link", 0x0, 0) = -1 EPERM (Operation not permitted)<br/> fgetxattr(3, "trusted.lov", 0x0, 0) = -1 EPERM (Operation not permitted)<br/> ...<br/> lgetxattr("test", "trusted.lma", 0x0, 0) = -1 EPERM (Operation not permitted)<br/> ...<br/> lgetxattr("test", "lustre.lov", "\xd0\x0b\xd1\x0b\x01\x00\x00\x00E\x1d\x00\x00\x00\x00\x00\x00\xe2\x00/\x00\x02\x00\x00\x00\x00\x00\x10\x00\x01\x00\x00\x00nE\x0b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0c\x00\x00", 56) = 56<br/> lsetxattr("/tmp/test", "lustre.lov", "\xd0\x0b\xd1\x0b\x01\x00\x00\x00E\x1d\x00\x00\x00\x00\x00\x00\xe2\x00/\x00\x02\x00\x00\x00\x00\x00\x10\x00\x01\x00\x00\x00nE\x0b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0c\x00\x00", 56, 0) = -1 EOPNOTSUPP (Operation not supported)<br/> getxattr("test", "system.posix_acl_access", 0x7fff6edfae60, 132) = -1 ENODATA (No data available)</p> <p>serwer side error:</p> <p>Lustre: 10440:0:(mdt_xattr.c:374:mdt_reint_setxattr()) client miss to set OBD_MD_FLCTIME when setxattr: [object <span class="error">&#91;0x2002f0053:0x38:0x0&#93;</span>] <span class="error">&#91;valid 68719476736&#93;</span></p> <p>mount options:<br/> MDT:<br/> /dev/mapper/scratch-mdt on /mnt/lustre/scratch-mdt type lustre (rw,acl,user_xattr)</p> <p>Client:<br/> 172.16.126.1@tcp:/scratch on /mnt/lustre/scratch type lustre (rw,nosuid,nodev,user_xattr,localflock,acl)</p> <p>We can supply more information if needed.</p> <p>&#8211;<br/> Lukasz Flis<br/> ACC Cyfronet AGH<br/> Poland</p> Client: lustre 1.8.6-wc1 <br/> Servers:<br/> &nbsp;lustre-2.0.65-2.6.18_238.12.1.el5_lustre_ga34dd87<br/> &nbsp;lustre-modules-2.0.65-2.6.18_238.12.1.el5_lustre_ga34dd87<br/> &nbsp;lustre-ldiskfs-3.3.0-2.6.18_238.12.1.el5_lustre_ga34dd87 LU-532

2.1 does not filter extended attributes list based on permissions, showing entire list at all times

Bug Blocker Resolved Fixed nasf Lukasz Flis Mon, 25 Jul 2011 10:21:35 +0000 Tue, 8 Sep 2015 17:26:30 +0000 Thu, 24 May 2012 02:06:20 +0000 Lustre 2.1.0 Lustre 2.2.0 Lustre 2.3.0 Lustre 2.1.2 Lustre 2.3.0 Lustre 2.1.2 0 7 <p>Is this test being run ad a regular user or as root?</p> <p>For regular users, the "trusted.*" xattrs are inaccessible.</p> <p>The server side error is definitely incorrect (though useful). It is legal (though unusual) for clients not to send timestamps with the RPCs, but that means the server timestamps will be used. The client <em>should</em> send the ctime with the setxattr, since we normally use the client timestamps for file updates to avoid clock-skew issues visible on the client. </p> <p>This test was done by regular user.<br/> OS is RHEL5.6</p> <p>The error message appears even when lustre is mounted w/o xattributes.<br/> 172.16.193.1@o2ib:/scratch on /mnt/lustre/scratch type lustre (rw,nosuid,nodev,flock)</p> <p>We also have other Lustre filesystem mounted on the same machine but served via 1.8.6 servers and <br/> the message doesn't appear.</p> <p>Ok, I think I tracked this one down.</p> <p>The problem in 2.1 is all permission checks are done at MDD level and wthe user info does not filter down to ldiskfs it seems, so the ldiskfs check does not work and all attributes are always present in listxattr output.<br/> Now of course the man page says that the FS is not supposed to always filter the list, so there is a bug in mv (or whatever lib it uses) too.</p> <p>Additionally I am not sure if we want to do filtering that we want to do it on server as opposed to the filtering on client so that the client can always cache the full list and save RPCs on subsequent access</p> <p>I think it makes more sense to do the xattr list filtering on the client, since it is possible that root will want to access all the xattrs on the client at some point (e.g. for backup). Moving discussion about xattr cache to a separate bug <a href="https://jira.whamcloud.com/browse/LU-549" title="Add xattr list/value cache on client" class="issue-link" data-issue-key="LU-549"><del>LU-549</del></a>.</p> <p>I've submitted <a href="http://review.whamcloud.com/1161" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/1161</a> to improve the MDS-side warning message to make this problem easier to debug in the future. The 1.8 client should also needs a patch so that it sends OBD_MD_FLCTIME for setxattr - looks like mdc_xattr_common() is the right place for it.</p> <p>Updated the title to indicate this is not an interop issue.</p> <p>Lukasz, this does not affect the data integrity or anything similar, so I think it should not be a big area of concern for you at this time.</p> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-master/./arch=i686,build_type=client,distro=el6,ib_stack=inkernel/329/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » i686,client,el6,inkernel #329</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision 622b1b48a1fa9dc8c6954fa7ca596358b05af888)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=622b1b48a1fa9dc8c6954fa7ca596358b05af888" class="external-link" target="_blank" rel="nofollow noopener">622b1b48a1fa9dc8c6954fa7ca596358b05af888</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-master/./arch=x86_64,build_type=server,distro=el6,ib_stack=inkernel/329/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » x86_64,server,el6,inkernel #329</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision 622b1b48a1fa9dc8c6954fa7ca596358b05af888)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=622b1b48a1fa9dc8c6954fa7ca596358b05af888" class="external-link" target="_blank" rel="nofollow noopener">622b1b48a1fa9dc8c6954fa7ca596358b05af888</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-master/./arch=x86_64,build_type=client,distro=el5,ib_stack=inkernel/329/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » x86_64,client,el5,inkernel #329</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision 622b1b48a1fa9dc8c6954fa7ca596358b05af888)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=622b1b48a1fa9dc8c6954fa7ca596358b05af888" class="external-link" target="_blank" rel="nofollow noopener">622b1b48a1fa9dc8c6954fa7ca596358b05af888</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-master/./arch=x86_64,build_type=client,distro=sles11,ib_stack=inkernel/329/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » x86_64,client,sles11,inkernel #329</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision 622b1b48a1fa9dc8c6954fa7ca596358b05af888)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=622b1b48a1fa9dc8c6954fa7ca596358b05af888" class="external-link" target="_blank" rel="nofollow noopener">622b1b48a1fa9dc8c6954fa7ca596358b05af888</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-master/./arch=x86_64,build_type=client,distro=el6,ib_stack=inkernel/329/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » x86_64,client,el6,inkernel #329</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision 622b1b48a1fa9dc8c6954fa7ca596358b05af888)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=622b1b48a1fa9dc8c6954fa7ca596358b05af888" class="external-link" target="_blank" rel="nofollow noopener">622b1b48a1fa9dc8c6954fa7ca596358b05af888</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-master/./arch=x86_64,build_type=client,distro=ubuntu1004,ib_stack=inkernel/329/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » x86_64,client,ubuntu1004,inkernel #329</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision 622b1b48a1fa9dc8c6954fa7ca596358b05af888)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=622b1b48a1fa9dc8c6954fa7ca596358b05af888" class="external-link" target="_blank" rel="nofollow noopener">622b1b48a1fa9dc8c6954fa7ca596358b05af888</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-master/./arch=x86_64,build_type=client,distro=el5,ib_stack=ofa/329/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » x86_64,client,el5,ofa #329</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision 622b1b48a1fa9dc8c6954fa7ca596358b05af888)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=622b1b48a1fa9dc8c6954fa7ca596358b05af888" class="external-link" target="_blank" rel="nofollow noopener">622b1b48a1fa9dc8c6954fa7ca596358b05af888</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-master/./arch=i686,build_type=server,distro=el5,ib_stack=inkernel/329/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » i686,server,el5,inkernel #329</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision 622b1b48a1fa9dc8c6954fa7ca596358b05af888)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=622b1b48a1fa9dc8c6954fa7ca596358b05af888" class="external-link" target="_blank" rel="nofollow noopener">622b1b48a1fa9dc8c6954fa7ca596358b05af888</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-master/./arch=i686,build_type=server,distro=el5,ib_stack=ofa/329/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » i686,server,el5,ofa #329</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision 622b1b48a1fa9dc8c6954fa7ca596358b05af888)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=622b1b48a1fa9dc8c6954fa7ca596358b05af888" class="external-link" target="_blank" rel="nofollow noopener">622b1b48a1fa9dc8c6954fa7ca596358b05af888</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-master/./arch=i686,build_type=server,distro=el6,ib_stack=inkernel/329/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » i686,server,el6,inkernel #329</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision 622b1b48a1fa9dc8c6954fa7ca596358b05af888)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=622b1b48a1fa9dc8c6954fa7ca596358b05af888" class="external-link" target="_blank" rel="nofollow noopener">622b1b48a1fa9dc8c6954fa7ca596358b05af888</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-master/./arch=x86_64,build_type=server,distro=el5,ib_stack=ofa/329/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » x86_64,server,el5,ofa #329</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision 622b1b48a1fa9dc8c6954fa7ca596358b05af888)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=622b1b48a1fa9dc8c6954fa7ca596358b05af888" class="external-link" target="_blank" rel="nofollow noopener">622b1b48a1fa9dc8c6954fa7ca596358b05af888</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-master/./arch=x86_64,build_type=server,distro=el5,ib_stack=inkernel/329/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » x86_64,server,el5,inkernel #329</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision 622b1b48a1fa9dc8c6954fa7ca596358b05af888)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=622b1b48a1fa9dc8c6954fa7ca596358b05af888" class="external-link" target="_blank" rel="nofollow noopener">622b1b48a1fa9dc8c6954fa7ca596358b05af888</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-master/./arch=i686,build_type=client,distro=el5,ib_stack=inkernel/329/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » i686,client,el5,inkernel #329</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision 622b1b48a1fa9dc8c6954fa7ca596358b05af888)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=622b1b48a1fa9dc8c6954fa7ca596358b05af888" class="external-link" target="_blank" rel="nofollow noopener">622b1b48a1fa9dc8c6954fa7ca596358b05af888</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-master/./arch=i686,build_type=client,distro=el5,ib_stack=ofa/329/" class="external-link" target="_blank" rel="nofollow noopener">lustre-master » i686,client,el5,ofa #329</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision 622b1b48a1fa9dc8c6954fa7ca596358b05af888)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/master&amp;a=commit&amp;h=622b1b48a1fa9dc8c6954fa7ca596358b05af888" class="external-link" target="_blank" rel="nofollow noopener">622b1b48a1fa9dc8c6954fa7ca596358b05af888</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>This is still a problem for Lustre 2.3.0. Running sanity.sh test_102j() as a non-root user with a lustre-aware tar still shows lots of spurious errors:</p> <div class="preformatted panel" style="border-width: 1px;"><div class="preformattedContent panelContent"> <pre>tar: d0.sanity/d102: Warning: Cannot fgetxattr: Operation not permitted tar: d0.sanity/d102: Warning: Cannot fgetxattr: Operation not permitted tar: d0.sanity/d102: Warning: Cannot fgetxattr: Operation not permitted tar: d0.sanity/d102/file3-1-1: Warning: Cannot lgetxattr: Operation not permitted tar: d0.sanity/d102/file3-1-1: Warning: Cannot lgetxattr: Operation not permitted tar: d0.sanity/d102/file3-1-1: Warning: Cannot lgetxattr: Operation not permitted tar: d0.sanity/d102/file3-0-2: Warning: Cannot lgetxattr: Operation not permitted tar: d0.sanity/d102/file3-0-2: Warning: Cannot lgetxattr: Operation not permitted tar: d0.sanity/d102/file3-0-2: Warning: Cannot lgetxattr: Operation not permitted tar: d0.sanity/d102/file1-0-1: Warning: Cannot lgetxattr: Operation not permitted tar: d0.sanity/d102/file1-0-1: Warning: Cannot lgetxattr: Operation not permitted tar: d0.sanity/d102/file1-0-1: Warning: Cannot lgetxattr: Operation not permitted tar: d0.sanity/d102/file1-1-3: Warning: Cannot lgetxattr: Operation not permitted tar: d0.sanity/d102/file1-1-3: Warning: Cannot lgetxattr: Operation not permitted </pre> </div></div> <p>Running this under strace shows it trying to access the trusted xattrs:</p> <div class="preformatted panel" style="border-width: 1px;"><div class="preformattedContent panelContent"> <pre>lgetxattr("d0.sanity/d102/file2-1-1", "trusted.lma", 0x229d690, 1024) = -1 EPERM (Operation not permitted) lgetxattr("d0.sanity/d102/file2-1-1", "trusted.link", 0x229d690, 1024) = -1 EPERM (Operation not permitted) lgetxattr("d0.sanity/d102/file2-1-1", "trusted.lov", 0x229d690, 1024) = -1 EPERM (Operation not permitted) </pre> </div></div> <p>This would essentially make the RHEL6 tar unusable on a 2.x client, so I'm elevating it to blocker status for 2.1.2 and 2.3.</p> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-b2_1/./arch=x86_64,build_type=client,distro=sles11,ib_stack=inkernel/41/" class="external-link" target="_blank" rel="nofollow noopener">lustre-b2_1 » x86_64,client,sles11,inkernel #41</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision a9388033cccf0bb5306560cfb76436dd1f1c2431)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/b2_1&amp;a=commit&amp;h=a9388033cccf0bb5306560cfb76436dd1f1c2431" class="external-link" target="_blank" rel="nofollow noopener">a9388033cccf0bb5306560cfb76436dd1f1c2431</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-b2_1/./arch=i686,build_type=client,distro=el6,ib_stack=inkernel/41/" class="external-link" target="_blank" rel="nofollow noopener">lustre-b2_1 » i686,client,el6,inkernel #41</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision a9388033cccf0bb5306560cfb76436dd1f1c2431)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/b2_1&amp;a=commit&amp;h=a9388033cccf0bb5306560cfb76436dd1f1c2431" class="external-link" target="_blank" rel="nofollow noopener">a9388033cccf0bb5306560cfb76436dd1f1c2431</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-b2_1/./arch=x86_64,build_type=server,distro=el6,ib_stack=inkernel/41/" class="external-link" target="_blank" rel="nofollow noopener">lustre-b2_1 » x86_64,server,el6,inkernel #41</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision a9388033cccf0bb5306560cfb76436dd1f1c2431)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/b2_1&amp;a=commit&amp;h=a9388033cccf0bb5306560cfb76436dd1f1c2431" class="external-link" target="_blank" rel="nofollow noopener">a9388033cccf0bb5306560cfb76436dd1f1c2431</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-b2_1/./arch=i686,build_type=client,distro=el5,ib_stack=ofa/41/" class="external-link" target="_blank" rel="nofollow noopener">lustre-b2_1 » i686,client,el5,ofa #41</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision a9388033cccf0bb5306560cfb76436dd1f1c2431)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/b2_1&amp;a=commit&amp;h=a9388033cccf0bb5306560cfb76436dd1f1c2431" class="external-link" target="_blank" rel="nofollow noopener">a9388033cccf0bb5306560cfb76436dd1f1c2431</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-b2_1/./arch=x86_64,build_type=server,distro=el5,ib_stack=ofa/41/" class="external-link" target="_blank" rel="nofollow noopener">lustre-b2_1 » x86_64,server,el5,ofa #41</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision a9388033cccf0bb5306560cfb76436dd1f1c2431)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/b2_1&amp;a=commit&amp;h=a9388033cccf0bb5306560cfb76436dd1f1c2431" class="external-link" target="_blank" rel="nofollow noopener">a9388033cccf0bb5306560cfb76436dd1f1c2431</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-b2_1/./arch=x86_64,build_type=client,distro=el6,ib_stack=inkernel/41/" class="external-link" target="_blank" rel="nofollow noopener">lustre-b2_1 » x86_64,client,el6,inkernel #41</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision a9388033cccf0bb5306560cfb76436dd1f1c2431)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/b2_1&amp;a=commit&amp;h=a9388033cccf0bb5306560cfb76436dd1f1c2431" class="external-link" target="_blank" rel="nofollow noopener">a9388033cccf0bb5306560cfb76436dd1f1c2431</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-b2_1/./arch=i686,build_type=server,distro=el6,ib_stack=inkernel/41/" class="external-link" target="_blank" rel="nofollow noopener">lustre-b2_1 » i686,server,el6,inkernel #41</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision a9388033cccf0bb5306560cfb76436dd1f1c2431)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/b2_1&amp;a=commit&amp;h=a9388033cccf0bb5306560cfb76436dd1f1c2431" class="external-link" target="_blank" rel="nofollow noopener">a9388033cccf0bb5306560cfb76436dd1f1c2431</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-b2_1/./arch=x86_64,build_type=client,distro=el5,ib_stack=inkernel/41/" class="external-link" target="_blank" rel="nofollow noopener">lustre-b2_1 » x86_64,client,el5,inkernel #41</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision a9388033cccf0bb5306560cfb76436dd1f1c2431)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/b2_1&amp;a=commit&amp;h=a9388033cccf0bb5306560cfb76436dd1f1c2431" class="external-link" target="_blank" rel="nofollow noopener">a9388033cccf0bb5306560cfb76436dd1f1c2431</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-b2_1/./arch=i686,build_type=server,distro=el5,ib_stack=inkernel/41/" class="external-link" target="_blank" rel="nofollow noopener">lustre-b2_1 » i686,server,el5,inkernel #41</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision a9388033cccf0bb5306560cfb76436dd1f1c2431)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/b2_1&amp;a=commit&amp;h=a9388033cccf0bb5306560cfb76436dd1f1c2431" class="external-link" target="_blank" rel="nofollow noopener">a9388033cccf0bb5306560cfb76436dd1f1c2431</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-b2_1/./arch=x86_64,build_type=server,distro=el5,ib_stack=inkernel/41/" class="external-link" target="_blank" rel="nofollow noopener">lustre-b2_1 » x86_64,server,el5,inkernel #41</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision a9388033cccf0bb5306560cfb76436dd1f1c2431)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/b2_1&amp;a=commit&amp;h=a9388033cccf0bb5306560cfb76436dd1f1c2431" class="external-link" target="_blank" rel="nofollow noopener">a9388033cccf0bb5306560cfb76436dd1f1c2431</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-b2_1/./arch=i686,build_type=server,distro=el5,ib_stack=ofa/41/" class="external-link" target="_blank" rel="nofollow noopener">lustre-b2_1 » i686,server,el5,ofa #41</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision a9388033cccf0bb5306560cfb76436dd1f1c2431)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/b2_1&amp;a=commit&amp;h=a9388033cccf0bb5306560cfb76436dd1f1c2431" class="external-link" target="_blank" rel="nofollow noopener">a9388033cccf0bb5306560cfb76436dd1f1c2431</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-b2_1/./arch=x86_64,build_type=client,distro=el5,ib_stack=ofa/41/" class="external-link" target="_blank" rel="nofollow noopener">lustre-b2_1 » x86_64,client,el5,ofa #41</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision a9388033cccf0bb5306560cfb76436dd1f1c2431)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/b2_1&amp;a=commit&amp;h=a9388033cccf0bb5306560cfb76436dd1f1c2431" class="external-link" target="_blank" rel="nofollow noopener">a9388033cccf0bb5306560cfb76436dd1f1c2431</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Integrated in <span class="image-wrap" style=""><img src="http://build.whamcloud.com/images/16x16/blue.png" style="border: 0px solid black" /></span> <a href="http://build.whamcloud.com/job/lustre-b2_1/./arch=i686,build_type=client,distro=el5,ib_stack=inkernel/41/" class="external-link" target="_blank" rel="nofollow noopener">lustre-b2_1 » i686,client,el5,inkernel #41</a><br/> <a href="https://jira.whamcloud.com/browse/LU-532" title="2.1 does not filter extended attributes list based on permissions, showing entire list at all times" class="issue-link" data-issue-key="LU-532"><del>LU-532</del></a> mdt: improve xattr ctime warning message (Revision a9388033cccf0bb5306560cfb76436dd1f1c2431)</p> <p> Result = SUCCESS<br/> Oleg Drokin : <a href="http://git.whamcloud.com/gitweb?p=fs/lustre-release.git;a=shortlog;h=refs/heads/b2_1&amp;a=commit&amp;h=a9388033cccf0bb5306560cfb76436dd1f1c2431" class="external-link" target="_blank" rel="nofollow noopener">a9388033cccf0bb5306560cfb76436dd1f1c2431</a><br/> Files : </p> <ul> <li>lustre/mdt/mdt_xattr.c</li> </ul> <p>Patch for filtering out trusted. xattr for non-root users:</p> <p><a href="http://review.whamcloud.com/#change,2490" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/#change,2490</a></p> <p>Landed for 2.1.2 and 2.3</p> <p>I am still seeing these when moving a file as an ordinary user. I am using 2.1.2 server and 1.8.8 client </p> <p>mv test0000 /scratch/mb435/<br/> mv: getting attribute `trusted.lma' of `trusted.lma': Operation not permitted<br/> mv: getting attribute `trusted.link' of `trusted.link': Operation not permitted<br/> mv: getting attribute `trusted.lov' of `trusted.lov': Operation not permitted</p> <p>On the server log shows</p> <p>Aug 30 12:34:40 10.143.245.207 mds07 kernel: Lustre: 5499:0:(mdt_xattr.c:377:mdt_reint_setxattr()) lhome-MDT0000: client miss to set OBD_MD_FLCTIME when setxattr system.posix_acl_access: [object <span class="error">&#91;0x200000bf7:0x9b:0x0&#93;</span>] <span class="error">&#91;valid 68719476736&#93;</span></p> <p>Filed <a href="https://jira.whamcloud.com/browse/LU-1838" title="1.8 client does not filter 2.x server extended attributes list based on permissions" class="issue-link" data-issue-key="LU-1838"><del>LU-1838</del></a> to track landing for 1.8.9.</p> Duplicate LU-1838 Development Rank 1|hzv6n3: Rank (Obsolete) 4610 Severity