| Summary: | [FEAT] cli commands should be selectively accepted from unprivileged users | ||
|---|---|---|---|
| Product: | [Community] GlusterFS | Reporter: | Csaba Henk <csaba> |
| Component: | rpc | Assignee: | Amar Tumballi <amarts> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Vijaykumar Koppad <vkoppad> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | high | ||
| Version: | mainline | CC: | bbandari, gluster-bugs, kaushal, rfortier, vraman |
| Target Milestone: | --- | Keywords: | FutureFeature |
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | glusterfs-3.4.0 | Doc Type: | Enhancement |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2013-07-24 17:36:56 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Bug Depends On: | |||
| Bug Blocks: | 817967 | ||
|
Description
Csaba Henk
2012-01-13 05:04:40 UTC
CHANGE: http://review.gluster.com/2640 (cli: exit with error if connection problem occurs) merged in master by Anand Avati (avati) CHANGE: http://review.gluster.com/2641 (rpc: extend actors with flag signing if privilege is required) merged in master by Anand Avati (avati) CHANGE: http://review.gluster.com/2695 (Revert "mgmt/glusterd: Allow insecure ports by default") merged in master by Vijay Bellur (vijay) Tested on v3.3.0qa44. By default, only selected commands are accepted by glusterd from unprivileged users. These commands presently only include 'gluster system:: [getwd|mount|umount]' used by the gluster mountbroker service. Eg output, As root, -!- ~ » glusterd -!- ~ » As unprivileged user, --- ~ » gluster system:: getwd --log-file=cli.log /var/lib/glusterd --- ~ » |