Back to bug 2147460

Who When What Removed Added
Red Hat One Jira (issues.redhat.com) 2022-11-23 23:15:19 UTC Link ID Red Hat Issue Tracker RHCEPH-5687
Scott Nipp 2022-11-23 23:16:16 UTC CC sbaldwin
Scott Nipp 2022-11-23 23:21:07 UTC CC vshankar
Flags needinfo?(vshankar)
Venky Shankar 2022-11-28 05:18:06 UTC Assignee vshankar mchangir
CC mchangir
Flags needinfo?(vshankar) needinfo?(mchangir)
Greg Farnum 2022-11-28 13:59:16 UTC CC gfarnum
Milind Changire 2022-12-09 10:22:54 UTC Flags needinfo?(mchangir)
Milind Changire 2022-12-13 09:46:43 UTC Blocks 2152849
Milind Changire 2022-12-13 09:49:20 UTC Blocks 2152849
Greg Farnum 2022-12-14 14:51:05 UTC Keywords Rebase
Status NEW MODIFIED
Veera Raghava Reddy 2022-12-16 04:58:34 UTC CC vereddy
Veera Raghava Reddy 2022-12-16 04:59:14 UTC Target Release 6.1 6.0
Red Hat Bugzilla 2022-12-31 19:50:23 UTC QA Contact hyelloji
Red Hat Bugzilla 2023-01-01 07:25:32 UTC CC sbaldwin
Red Hat Bugzilla 2023-01-01 08:47:04 UTC CC vereddy
Red Hat Bugzilla 2023-01-01 08:49:18 UTC CC vshankar
Veera Raghava Reddy 2023-01-02 10:30:45 UTC CC vereddy
QA Contact hyelloji
Alasdair Kergon 2023-01-04 05:40:41 UTC CC sbaldwin
Alasdair Kergon 2023-01-04 05:57:59 UTC CC vshankar
Ken Dreyer (Red Hat) 2023-01-04 16:35:51 UTC CC kdreyer
Fixed In Version ceph-17.2.5-1.el9cp
Brett Hull 2023-01-04 18:51:53 UTC CC bhull
errata-xmlrpc 2023-01-04 22:37:19 UTC Status MODIFIED ON_QA
Brett Hull 2023-01-04 23:20:49 UTC Blocks 2158286
Eliska 2023-01-06 09:49:41 UTC Flags needinfo?(mchangir)
CC ekristov
Milind Changire 2023-01-06 12:28:22 UTC Doc Text Cause:
Incorrect Discretionary Access Control management.

Consequence:
Directories access was denied even to UID 0 due to incorrect DAC management.

Fix:
Bugfix now allows directory access to UID 0 even if the actual permissions for the directory user, group and others aren't permissible for UID 0.

Result:
Bugfix now results in correct cephfs behavior for directory access by UID 0 effectively granting superuser priveleges.
Doc Type If docs needed, set a value Bug Fix
Milind Changire 2023-01-06 12:29:08 UTC Flags needinfo?(mchangir)
Geo Jose 2023-01-09 05:21:23 UTC CC gjose
Red Hat Bugzilla 2023-01-09 08:28:01 UTC CC ceph-eng-bugs
Alasdair Kergon 2023-01-09 19:43:36 UTC CC ceph-eng-bugs
Eliska 2023-01-12 08:38:03 UTC Docs Contact ekristov
Doc Text Cause:
Incorrect Discretionary Access Control management.

Consequence:
Directories access was denied even to UID 0 due to incorrect DAC management.

Fix:
Bugfix now allows directory access to UID 0 even if the actual permissions for the directory user, group and others aren't permissible for UID 0.

Result:
Bugfix now results in correct cephfs behavior for directory access by UID 0 effectively granting superuser priveleges.
.The CephFS now has the correct directory access

Previously, directory access was denied even to the UID of 0 due to incorrect Discretionary Access Control (DAC) management.

With this fix, directory access is allowed to UID 0 even if the actual permissions for the directory user, group, and others are not permissible for UID 0.
This results in the correct Ceph File System (CephFS) behavior for directory access to UID 0 by effectively granting superuser privileges.
Eliska 2023-01-12 08:48:05 UTC Blocks 2126050
Hemanth Kumar 2023-01-12 08:57:54 UTC Flags needinfo?(mchangir) needinfo?(vshankar)
Milind Changire 2023-01-12 13:41:47 UTC Flags needinfo?(mchangir)
Hemanth Kumar 2023-01-12 19:08:24 UTC Status ON_QA VERIFIED
Flags needinfo?(vshankar)
Scott Nipp 2023-03-03 13:34:03 UTC Blocks 2175175
errata-xmlrpc 2023-03-20 18:59:40 UTC Status VERIFIED CLOSED
Resolution --- ERRATA
Last Closed 2023-03-20 18:59:40 UTC
errata-xmlrpc 2023-03-20 19:00:50 UTC Link ID Red Hat Product Errata RHBA-2023:1360

Back to bug 2147460