Bug 1167580

Summary: [USS]: Non root user who has no access to a directory, from NFS mount, is able to access the files under .snaps under that directory
Product: [Community] GlusterFS Reporter: Sachin Pandit <spandit>
Component: snapshotAssignee: Sachin Pandit <spandit>
Status: CLOSED CURRENTRELEASE QA Contact:
Severity: high Docs Contact:
Priority: unspecified    
Version: mainlineCC: bugs, gluster-bugs, nsathyan, rhinduja, senaik, spandit, surs
Target Milestone: ---Keywords: Triaged, ZStream
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: USS
Fixed In Version: glusterfs-3.7.0 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 1165026
: 1175739 (view as bug list) Environment:
Last Closed: 2015-05-14 17:28:33 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1165026    
Bug Blocks: 1175739    

Comment 1 Anand Avati 2014-11-25 09:17:25 UTC
REVIEW: http://review.gluster.org/9194 (USS : fill proper uid and gid during a access call from nfs) posted (#1) for review on master by Sachin Pandit (spandit)

Comment 2 Anand Avati 2014-11-27 13:44:58 UTC
REVIEW: http://review.gluster.org/9194 (USS : fill proper uid and gid during a access call from nfs) posted (#2) for review on master by Sachin Pandit (spandit)

Comment 3 Anand Avati 2014-11-27 14:00:48 UTC
REVIEW: http://review.gluster.org/9194 (USS : fill proper uid and gid during a access call from nfs) posted (#3) for review on master by Sachin Pandit (spandit)

Comment 4 Anand Avati 2014-11-28 12:45:52 UTC
REVIEW: http://review.gluster.org/9194 (USS : fill proper uid and gid during a access call from nfs) posted (#4) for review on master by Sachin Pandit (spandit)

Comment 5 Anand Avati 2014-12-01 07:09:03 UTC
REVIEW: http://review.gluster.org/9194 (USS : fill proper uid and gid during a access call from nfs) posted (#5) for review on master by Sachin Pandit (spandit)

Comment 6 Anand Avati 2014-12-01 12:54:00 UTC
REVIEW: http://review.gluster.org/9194 (USS : fill proper uid and gid during a access call from nfs) posted (#6) for review on master by Sachin Pandit (spandit)

Comment 7 Anand Avati 2014-12-01 13:43:21 UTC
REVIEW: http://review.gluster.org/9194 (USS : fill proper uid and gid during a access call from nfs) posted (#7) for review on master by Sachin Pandit (spandit)

Comment 8 Anand Avati 2014-12-01 13:46:48 UTC
REVIEW: http://review.gluster.org/9194 (USS : fill proper uid and gid during a access call from nfs) posted (#8) for review on master by Sachin Pandit (spandit)

Comment 9 Anand Avati 2014-12-01 16:04:10 UTC
COMMIT: http://review.gluster.org/9194 committed in master by Vijay Bellur (vbellur) 
------
commit eee41566697583f74784d9f9ff78651535d6eb91
Author: Sachin Pandit <spandit>
Date:   Tue Nov 25 07:20:38 2014 +0530

    USS : fill proper uid and gid during a access call from nfs
    
    Problem : when an user tries to access a file/folder for which
    he does not have a proper permission required then fuse gives out
    a proper error "Permission denied", but nfs does not give out that
    error, rather he can access the file/folder. The reason being uid and
    gid of call frame stack takes a default value of uid and gid which
    point to root permission.
    
    Solution : Set a proper uid and gid during a access call from nfs
    
    Change-Id: Ib060706fde66ec7e60f242fab1f3e59122ed2245
    BUG: 1167580
    Signed-off-by: Sachin Pandit <spandit>
    Reviewed-on: http://review.gluster.org/9194
    Reviewed-by: Vijaikumar Mallikarjuna <vmallika>
    Reviewed-by: Rajesh Joseph <rjoseph>
    Tested-by: Gluster Build System <jenkins.com>
    Reviewed-by: Vijay Bellur <vbellur>

Comment 10 Niels de Vos 2015-05-14 17:28:33 UTC
This bug is getting closed because a release has been made available that should address the reported issue. In case the problem is still not fixed with glusterfs-3.7.0, please open a new bug report.

glusterfs-3.7.0 has been announced on the Gluster mailinglists [1], packages for several distributions should become available in the near future. Keep an eye on the Gluster Users mailinglist [2] and the update infrastructure for your distribution.

[1] http://thread.gmane.org/gmane.comp.file-systems.gluster.devel/10939
[2] http://thread.gmane.org/gmane.comp.file-systems.gluster.user

Comment 11 Niels de Vos 2015-05-14 17:35:43 UTC
This bug is getting closed because a release has been made available that should address the reported issue. In case the problem is still not fixed with glusterfs-3.7.0, please open a new bug report.

glusterfs-3.7.0 has been announced on the Gluster mailinglists [1], packages for several distributions should become available in the near future. Keep an eye on the Gluster Users mailinglist [2] and the update infrastructure for your distribution.

[1] http://thread.gmane.org/gmane.comp.file-systems.gluster.devel/10939
[2] http://thread.gmane.org/gmane.comp.file-systems.gluster.user

Comment 12 Niels de Vos 2015-05-14 17:38:06 UTC
This bug is getting closed because a release has been made available that should address the reported issue. In case the problem is still not fixed with glusterfs-3.7.0, please open a new bug report.

glusterfs-3.7.0 has been announced on the Gluster mailinglists [1], packages for several distributions should become available in the near future. Keep an eye on the Gluster Users mailinglist [2] and the update infrastructure for your distribution.

[1] http://thread.gmane.org/gmane.comp.file-systems.gluster.devel/10939
[2] http://thread.gmane.org/gmane.comp.file-systems.gluster.user

Comment 13 Niels de Vos 2015-05-14 17:45:02 UTC
This bug is getting closed because a release has been made available that should address the reported issue. In case the problem is still not fixed with glusterfs-3.7.0, please open a new bug report.

glusterfs-3.7.0 has been announced on the Gluster mailinglists [1], packages for several distributions should become available in the near future. Keep an eye on the Gluster Users mailinglist [2] and the update infrastructure for your distribution.

[1] http://thread.gmane.org/gmane.comp.file-systems.gluster.devel/10939
[2] http://thread.gmane.org/gmane.comp.file-systems.gluster.user