Bug 1566891
| Summary: | Set ACL policy in distrubte online will be failed which do check ACL permission | ||
|---|---|---|---|
| Product: | [Community] GlusterFS | Reporter: | George <george.lian> |
| Component: | access-control | Assignee: | Susant Kumar Palai <spalai> |
| Status: | CLOSED UPSTREAM | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | mainline | CC: | bugs, jthottan, spalai |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2020-03-12 12:39:33 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
George
2018-04-13 07:14:27 UTC
From the code study for posix-acl Xlator part, I have some concern for the following 2 point.
1) Configure item “md-cache.cache-posix-acl” is not implement , though the item is defined in md-cache xlator.
2) There are more logic in posix_acl_FOP(posix_acl_lookup,posix_acl_create, and so on) have the following code script:
if (acl_permits (frame, loc->parent, POSIX_ACL_EXECUTE))
goto green;
else
goto red;
the above code will check the inode’s parent acl whether the ACL policy is met or not, but if we set the ACL policy on the other client,
the current client(mount point, glusterfs process) have no chance to get the ACL policy of parent inode in most case with the current implement of glusterfs ,
I suppose when ACL disabled, the lookup and getattr FOP for parent inode will be reduced due to performance consider, but when ACL enabled, it will lead to ACL policy issue.
and 2 question:
1) do glusterfs support ACL distribute cases?
2) if yes, have there test case agaient distribute ACL setting online case?
Release 3.12 has been EOLd and this bug was still found to be in the NEW state, hence moving the version to mainline, to triage the same and take appropriate actions. This bug is moved to https://github.com/gluster/glusterfs/issues/921, and will be tracked there from now on. Visit GitHub issues URL for further details |