Bug 1167580 - [USS]: Non root user who has no access to a directory, from NFS mount, is able to access the files under .snaps under that directory
Summary: [USS]: Non root user who has no access to a directory, from NFS mount, is abl...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: GlusterFS
Classification: Community
Component: snapshot
Version: mainline
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: ---
Assignee: Sachin Pandit
QA Contact:
URL:
Whiteboard: USS
Depends On: 1165026
Blocks: 1175739
TreeView+ depends on / blocked
 
Reported: 2014-11-25 06:14 UTC by Sachin Pandit
Modified: 2015-12-01 16:45 UTC (History)
7 users (show)

Fixed In Version: glusterfs-3.7.0
Doc Type: Bug Fix
Doc Text:
Clone Of: 1165026
: 1175739 (view as bug list)
Environment:
Last Closed: 2015-05-14 17:28:33 UTC
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Embargoed:


Attachments (Terms of Use)

Comment 1 Anand Avati 2014-11-25 09:17:25 UTC
REVIEW: http://review.gluster.org/9194 (USS : fill proper uid and gid during a access call from nfs) posted (#1) for review on master by Sachin Pandit (spandit)

Comment 2 Anand Avati 2014-11-27 13:44:58 UTC
REVIEW: http://review.gluster.org/9194 (USS : fill proper uid and gid during a access call from nfs) posted (#2) for review on master by Sachin Pandit (spandit)

Comment 3 Anand Avati 2014-11-27 14:00:48 UTC
REVIEW: http://review.gluster.org/9194 (USS : fill proper uid and gid during a access call from nfs) posted (#3) for review on master by Sachin Pandit (spandit)

Comment 4 Anand Avati 2014-11-28 12:45:52 UTC
REVIEW: http://review.gluster.org/9194 (USS : fill proper uid and gid during a access call from nfs) posted (#4) for review on master by Sachin Pandit (spandit)

Comment 5 Anand Avati 2014-12-01 07:09:03 UTC
REVIEW: http://review.gluster.org/9194 (USS : fill proper uid and gid during a access call from nfs) posted (#5) for review on master by Sachin Pandit (spandit)

Comment 6 Anand Avati 2014-12-01 12:54:00 UTC
REVIEW: http://review.gluster.org/9194 (USS : fill proper uid and gid during a access call from nfs) posted (#6) for review on master by Sachin Pandit (spandit)

Comment 7 Anand Avati 2014-12-01 13:43:21 UTC
REVIEW: http://review.gluster.org/9194 (USS : fill proper uid and gid during a access call from nfs) posted (#7) for review on master by Sachin Pandit (spandit)

Comment 8 Anand Avati 2014-12-01 13:46:48 UTC
REVIEW: http://review.gluster.org/9194 (USS : fill proper uid and gid during a access call from nfs) posted (#8) for review on master by Sachin Pandit (spandit)

Comment 9 Anand Avati 2014-12-01 16:04:10 UTC
COMMIT: http://review.gluster.org/9194 committed in master by Vijay Bellur (vbellur) 
------
commit eee41566697583f74784d9f9ff78651535d6eb91
Author: Sachin Pandit <spandit>
Date:   Tue Nov 25 07:20:38 2014 +0530

    USS : fill proper uid and gid during a access call from nfs
    
    Problem : when an user tries to access a file/folder for which
    he does not have a proper permission required then fuse gives out
    a proper error "Permission denied", but nfs does not give out that
    error, rather he can access the file/folder. The reason being uid and
    gid of call frame stack takes a default value of uid and gid which
    point to root permission.
    
    Solution : Set a proper uid and gid during a access call from nfs
    
    Change-Id: Ib060706fde66ec7e60f242fab1f3e59122ed2245
    BUG: 1167580
    Signed-off-by: Sachin Pandit <spandit>
    Reviewed-on: http://review.gluster.org/9194
    Reviewed-by: Vijaikumar Mallikarjuna <vmallika>
    Reviewed-by: Rajesh Joseph <rjoseph>
    Tested-by: Gluster Build System <jenkins.com>
    Reviewed-by: Vijay Bellur <vbellur>

Comment 10 Niels de Vos 2015-05-14 17:28:33 UTC
This bug is getting closed because a release has been made available that should address the reported issue. In case the problem is still not fixed with glusterfs-3.7.0, please open a new bug report.

glusterfs-3.7.0 has been announced on the Gluster mailinglists [1], packages for several distributions should become available in the near future. Keep an eye on the Gluster Users mailinglist [2] and the update infrastructure for your distribution.

[1] http://thread.gmane.org/gmane.comp.file-systems.gluster.devel/10939
[2] http://thread.gmane.org/gmane.comp.file-systems.gluster.user

Comment 11 Niels de Vos 2015-05-14 17:35:43 UTC
This bug is getting closed because a release has been made available that should address the reported issue. In case the problem is still not fixed with glusterfs-3.7.0, please open a new bug report.

glusterfs-3.7.0 has been announced on the Gluster mailinglists [1], packages for several distributions should become available in the near future. Keep an eye on the Gluster Users mailinglist [2] and the update infrastructure for your distribution.

[1] http://thread.gmane.org/gmane.comp.file-systems.gluster.devel/10939
[2] http://thread.gmane.org/gmane.comp.file-systems.gluster.user

Comment 12 Niels de Vos 2015-05-14 17:38:06 UTC
This bug is getting closed because a release has been made available that should address the reported issue. In case the problem is still not fixed with glusterfs-3.7.0, please open a new bug report.

glusterfs-3.7.0 has been announced on the Gluster mailinglists [1], packages for several distributions should become available in the near future. Keep an eye on the Gluster Users mailinglist [2] and the update infrastructure for your distribution.

[1] http://thread.gmane.org/gmane.comp.file-systems.gluster.devel/10939
[2] http://thread.gmane.org/gmane.comp.file-systems.gluster.user

Comment 13 Niels de Vos 2015-05-14 17:45:02 UTC
This bug is getting closed because a release has been made available that should address the reported issue. In case the problem is still not fixed with glusterfs-3.7.0, please open a new bug report.

glusterfs-3.7.0 has been announced on the Gluster mailinglists [1], packages for several distributions should become available in the near future. Keep an eye on the Gluster Users mailinglist [2] and the update infrastructure for your distribution.

[1] http://thread.gmane.org/gmane.comp.file-systems.gluster.devel/10939
[2] http://thread.gmane.org/gmane.comp.file-systems.gluster.user


Note You need to log in before you can comment on or make changes to this bug.