Bug 1185654
Summary: | Improved support for POSIX ACLs | ||
---|---|---|---|
Product: | [Community] GlusterFS | Reporter: | Niels de Vos <ndevos> |
Component: | access-control | Assignee: | Niels de Vos <ndevos> |
Status: | CLOSED CURRENTRELEASE | QA Contact: | |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | mainline | CC: | bugs, gluster-bugs |
Target Milestone: | --- | Keywords: | FutureFeature |
Target Release: | --- | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
URL: | http://www.gluster.org/community/documentation/index.php/Features/Improved_POSIX_ACLs | ||
Whiteboard: | |||
Fixed In Version: | glusterfs-3.7.0beta1 | Doc Type: | Enhancement |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2015-05-14 17:26:24 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | |||
Bug Blocks: | 1188184 |
Description
Niels de Vos
2015-01-25 14:57:59 UTC
REVIEW: http://review.gluster.org/9627 (posix: add ACL translation for the GF_POSIX_ACL_*_KEY xattr) posted (#1) for review on master by Niels de Vos (ndevos) REVIEW: http://review.gluster.org/9627 (posix: add ACL translation for the GF_POSIX_ACL_*_KEY xattr) posted (#2) for review on master by Niels de Vos (ndevos) REVIEW: http://review.gluster.org/9627 (posix: add ACL translation for the GF_POSIX_ACL_*_KEY xattr) posted (#3) for review on master by Niels de Vos (ndevos) REVIEW: http://review.gluster.org/9627 (posix: add ACL translation for the GF_POSIX_ACL_*_KEY xattr) posted (#4) for review on master by Niels de Vos (ndevos) REVIEW: http://review.gluster.org/9736 (gfapi: add glfs_h_acl_set() and glfs_h_acl_get()) posted (#1) for review on master by Niels de Vos (ndevos) REVIEW: http://review.gluster.org/9627 (posix: add ACL translation for the GF_POSIX_ACL_*_KEY xattr) posted (#5) for review on master by Niels de Vos (ndevos) COMMIT: http://review.gluster.org/9627 committed in master by Raghavendra Bhat (raghavendra) ------ commit 72dc1025dc17a650f3838223c78e3205132deba9 Author: Niels de Vos <ndevos> Date: Tue Feb 10 19:13:35 2015 +0100 posix: add ACL translation for the GF_POSIX_ACL_*_KEY xattr Adding support for two virtual extended attributes that are used for converting a binary POSIX ACL to a POSIX.1e long ACL text format. This makes it possible to transfer the ACL over the network to a different OS which can convert the POSIX.1e text format to its native structures. The following xattrs are sent over RPC in SETXATTR/GETXATTR procedures, and contain the POSIX.1e long ACL text format: - glusterfs.posix.acl: maps to ACL_TYPE_ACCESS - glusterfs.posix.default_acl: maps to ACL_TYPE_DEFAULT acl_from_text() (from libacl) converts the text format into an acl_t structure. This structure is then used by acl_set_file() to set the ACL in the filesystem. libacl-devel is needed for linking against libacl, so it has been added to the BuildRequires in the .spec. NetBSD does not support POSIX ACLs. Trying to get/set POSIX ACLs on a storage server running NetBSD, an error will be returned with errno set to ENOTSUP. Faking support, but not enforcing ACLs seems wrong to me. URL: http://www.gluster.org/community/documentation/index.php/Features/Improved_POSIX_ACLs BUG: 1185654 Change-Id: Ic5eb73d69190d3492df2f711d0436775eeea7de3 Signed-off-by: Niels de Vos <ndevos> Reviewed-on: http://review.gluster.org/9627 Tested-by: Gluster Build System <jenkins.com> Reviewed-by: soumya k <skoduri> Reviewed-by: Raghavendra Bhat <raghavendra> REVIEW: http://review.gluster.org/9848 (configure.ac: Make USE_POSIX_ACLS value consistent with others.) posted (#1) for review on master by Raghavendra Talur (rtalur) REVIEW: http://review.gluster.org/9736 (gfapi: add glfs_h_acl_set() and glfs_h_acl_get()) posted (#2) for review on master by Niels de Vos (ndevos) COMMIT: http://review.gluster.org/9736 committed in master by Vijay Bellur (vbellur) ------ commit 728fcd41eb39f66744d84b979dd8195fd47313ed Author: Niels de Vos <ndevos> Date: Tue Feb 24 19:42:49 2015 +0100 gfapi: add glfs_h_acl_set() and glfs_h_acl_get() These two functions add support for POSIX ACLs through the GFAPI-handle interface. The initial infrastructure for POSIX ACLs based on libacl has been added with the required changes to the POSIX xlator: - http://review.gluster.org/9627 NetBSD does not support POSIX ACLs, so using any of the functions should return ENOTSUP. URL: http://www.gluster.org/community/documentation/index.php/Features/Improved_POSIX_ACLs Change-Id: Ie74f3f963c3f9d576cb2f2a1e6d97e3cd4b01eda BUG: 1185654 Signed-off-by: Niels de Vos <ndevos> Reviewed-on: http://review.gluster.org/9736 Reviewed-by: Kaleb KEITHLEY <kkeithle> Tested-by: Gluster Build System <jenkins.com> Reviewed-by: Vijay Bellur <vbellur> REVIEW: http://review.gluster.org/9937 (gfapi: space/tab conversion in gfapi.map) posted (#1) for review on master by Niels de Vos (ndevos) REVIEW: http://review.gluster.org/9938 (build: change the o/p for option USE_POSIX_ACLS.) posted (#1) for review on master by Vijay Bellur (vbellur) COMMIT: http://review.gluster.org/9937 committed in master by Kaleb KEITHLEY (kkeithle) ------ commit c270d4da8d0cc0a3856969f10ef6415be5615544 Author: Niels de Vos <ndevos> Date: Wed Mar 18 22:07:19 2015 +0100 gfapi: space/tab conversion in gfapi.map The last two patches incorrectly add symbols indented by spaces. The rest of the file uses tabs. This change corrects these occurences. Change-Id: Ibfb057b78c1203a594bfeb73a2955e798e86c8e1 BUG: 1185654 Reported-by: Kaleb S. Keithley <kkeithle> Signed-off-by: Niels de Vos <ndevos> Reviewed-on: http://review.gluster.org/9937 Tested-by: Gluster Build System <jenkins.com> Reviewed-by: Kaleb KEITHLEY <kkeithle> REVIEW: http://review.gluster.org/9947 (md-cache: cache virtual POSIX ACL xattrs) posted (#1) for review on master by Niels de Vos (ndevos) COMMIT: http://review.gluster.org/9947 committed in master by Vijay Bellur (vbellur) ------ commit eeef9bf8c93b9a11df6ef530924ba4ab44e0092a Author: Niels de Vos <ndevos> Date: Thu Mar 19 19:32:44 2015 +0100 md-cache: cache virtual POSIX ACL xattrs http://review.gluster.org/9627 introduces two new virtual extended attributes that are used similar to the existing POSIX ACL xattrs. These new xattrs should get cached in the same way. BUG: 1185654 Change-Id: I6294b4f9ade887e29f8bd8ae5a3642891df8a631 Signed-off-by: Niels de Vos <ndevos> Reviewed-on: http://review.gluster.org/9947 Reviewed-by: Kaleb KEITHLEY <kkeithle> Tested-by: Gluster Build System <jenkins.com> Reviewed-by: Vijay Bellur <vbellur> REVIEW: http://review.gluster.org/9848 (configure.ac: print yes/no instead of 1/0 in output) posted (#2) for review on master by Raghavendra Talur (rtalur) COMMIT: http://review.gluster.org/9848 committed in master by Niels de Vos (ndevos) ------ commit 3fc4f31a78e06dc09e03a958be500683dc9bcd78 Author: Raghavendra Talur <rtalur> Date: Tue Mar 10 15:13:29 2015 +0530 configure.ac: print yes/no instead of 1/0 in output POSIX_ACLS support in output of configure shows 0/1 instead of no/yes. Added BUILD_POSIX_ACLS to make value consistent. Change-Id: Ife728d0d03ff0eb03d4389fefc04507a76205ccd BUG: 1185654 Signed-off-by: Raghavendra Talur <rtalur> Reviewed-on: http://review.gluster.org/9848 Tested-by: Gluster Build System <jenkins.com> Reviewed-by: Kaleb KEITHLEY <kkeithle> Reviewed-by: Niels de Vos <ndevos> Tested-by: NetBSD Build System This bug is getting closed because a release has been made available that should address the reported issue. In case the problem is still not fixed with glusterfs-3.7.0, please open a new bug report. glusterfs-3.7.0 has been announced on the Gluster mailinglists [1], packages for several distributions should become available in the near future. Keep an eye on the Gluster Users mailinglist [2] and the update infrastructure for your distribution. [1] http://thread.gmane.org/gmane.comp.file-systems.gluster.devel/10939 [2] http://thread.gmane.org/gmane.comp.file-systems.gluster.user This bug is getting closed because a release has been made available that should address the reported issue. In case the problem is still not fixed with glusterfs-3.7.0, please open a new bug report. glusterfs-3.7.0 has been announced on the Gluster mailinglists [1], packages for several distributions should become available in the near future. Keep an eye on the Gluster Users mailinglist [2] and the update infrastructure for your distribution. [1] http://thread.gmane.org/gmane.comp.file-systems.gluster.devel/10939 [2] http://thread.gmane.org/gmane.comp.file-systems.gluster.user This bug is getting closed because a release has been made available that should address the reported issue. In case the problem is still not fixed with glusterfs-3.7.0, please open a new bug report. glusterfs-3.7.0 has been announced on the Gluster mailinglists [1], packages for several distributions should become available in the near future. Keep an eye on the Gluster Users mailinglist [2] and the update infrastructure for your distribution. [1] http://thread.gmane.org/gmane.comp.file-systems.gluster.devel/10939 [2] http://thread.gmane.org/gmane.comp.file-systems.gluster.user |