Bug 1217817 – [RFE] Run ceph daemons as ceph user/group

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1217817 - [RFE] Run ceph daemons as ceph user/group

Summary:	[RFE] Run ceph daemons as ceph user/group

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat Ceph Storage
Classification:	Red Hat
Component:	RADOS (Show other bugs)
Sub Component:
Version:	1.2.3
Hardware:	Unspecified Unspecified

Priority	unspecified Severity unspecified
Target Milestone:	rc
Target Release:	2.0
Assigned To:	Ken Dreyer (Red Hat)
QA Contact:	shylesh
Docs Contact:	Bara Ancincova

URL:
Whiteboard:
Keywords:	FutureFeature

Duplicates:	1217859 (view as bug list)
Depends On:	1220846 1221042 1221043
Blocks:	1322504
	Show dependency tree / graph

Reported:	2015-05-01 14:38 EDT by Sage Weil
Modified:	2017-07-30 11:11 EDT (History)
CC List:	10 users (show)

See Also:
Fixed In Version:
Doc Type:	Enhancement
Doc Text:	.Ceph daemons now run as the `ceph` user and group With this release, Ceph daemons, such as `ceph-osd` or `ceph-mon`, no longer run as `root` but run as the `ceph` user that belongs to the `ceph` group. This change improves security of the Ceph cluster.
Story Points:	---
Clone Of:
Environment:
Last Closed:	2016-08-23 15:25:42 EDT
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Knowledge Base (Solution)	2909121	None	None	None	2017-02-06 17:38 EST
Ceph Project Bug Tracker	9133	None	None	None	Never
Red Hat Product Errata	RHBA-2016:1755	normal	SHIPPED_LIVE	Red Hat Ceph Storage 2.0 bug fix and enhancement update	2016-08-23 19:23:52 EDT

Groups: None (edit)

Description Sage Weil 2015-05-01 14:38:24 EDT

Description of problem:

Daemons run as root, which is not a good practice for security.

Expected results:

Run as user ceph and group ceph.


Additional info:

Comment 2 Neil Levine 2015-05-01 19:34:31 EDT

*** Bug 1217859 has been marked as a duplicate of this bug. ***

Comment 3 Ken Dreyer (Red Hat) 2016-02-29 11:02:54 EST

This will be in RHCS 2 (it has been upstream since Infernalis).

Comment 9 errata-xmlrpc 2016-08-23 15:25:42 EDT

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2016:1755

Note You need to log in before you can comment on or make changes to this bug.