Bug 848447 - xattr flipping is broken for uid-mapped unprivileged users
Summary: xattr flipping is broken for uid-mapped unprivileged users
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: GlusterFS
Classification: Community
Component: fuse
Version: mainline
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Csaba Henk
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-08-15 16:08 UTC by Csaba Henk
Modified: 2013-07-24 17:58 UTC (History)
2 users (show)

Fixed In Version: glusterfs-3.4.0
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-07-24 17:58:02 UTC
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Embargoed:


Attachments (Terms of Use)

Description Csaba Henk 2012-08-15 16:08:27 UTC
Description of problem:

Xattr flipping is the mechanism we use to circumvent kernel's protection of the "trusted" xattr namespace in the case when we want to give control over some such attrs to unprivileged user (case of unprivileged geo-rep slaves).

For this reason, we treat these attrs addressable also in the "system" namespace (mapped back to trusted before hitting the platter). The unified behavior for system and trusted namespaces is now broken -- in trusted, setxattrs take effect
as one would expect, in system they are just no-ops.

Version-Release number of selected component (if applicable):

From http://review.gluster.com/3687 on.

How reproducible:

Very.

Steps to Reproduce:
1. set up glusterfs, create a volume called, say, "poc"
2. gluster vol set poc indexing on
3. mount poc with this command:
   glusterfs -s localhost --volfile-id=poc --client-pid=-1 /mnt/gluster
4. setfattr -h -n system.glusterfs.whatever.xtime -v something /mnt/gluster
5. getfattr -h -m. -n system.glusterfs.whatever.xtime /mnt/gluster

Actual results:

/mnt/gluster: system.glusterfs.whatever.xtime: No such attribute

Expected results:

# file: mnt/gluster
system.glusterfs.whatever.xtime="something"

Comment 1 Vijay Bellur 2012-08-19 16:31:01 UTC
CHANGE: http://review.gluster.com/3821 (fuse: have setxattr on geo-rep related xattrs take effect) merged in master by Anand Avati (avati)


Note You need to log in before you can comment on or make changes to this bug.