[Bugs] [Bug 1459972] posix-acl: Whitelist virtual ACL xattrs

[bugzilla at redhat.com]

https://bugzilla.redhat.com/show_bug.cgi?id=1459972

Manisha Saini <msaini at redhat.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ON_QA                       |VERIFIED



--- Comment #9 from Manisha Saini <msaini at redhat.com> ---
Verified this bug on 

# rpm -qa | grep ganesha
glusterfs-ganesha-3.8.4-34.el7rhgs.x86_64
nfs-ganesha-2.4.4-16.el7rhgs.x86_64
nfs-ganesha-gluster-2.4.4-16.el7rhgs.x86_64

-----------
Reproduced on 3.2
-----------

[root at dhcp37-192 posix]# touch ms
[root at dhcp37-192 posix]# ll
total 0
-rw-r--r--. 1 root root 0 Jul 24 13:07 ms
[root at dhcp37-192 posix]# chmod 700 ms 
[root at dhcp37-192 posix]# ll
total 0
-rwx------. 1 root root 0 Jul 24 13:07 ms
[root at dhcp37-192 posix]#  getfattr -n glusterfs.posix.acl
/mnt/ganesha32_async/posix/ms 
getfattr: Removing leading '/' from absolute path names
# file: mnt/ganesha32_async/posix/ms
glusterfs.posix.acl="u::rwx,g::---,o::---"

[root at dhcp37-192 posix]# su user1
[user1 at dhcp37-192 posix]$ getfattr -n glusterfs.posix.acl
/mnt/ganesha32_async/posix/ms
/mnt/ganesha32_async/posix/ms: glusterfs.posix.acl: Permission denied
[user1 at dhcp37-192 posix]$ 

===================================

----------
Verified on 3.3.
----------


[root at dhcp37-192 posix]# touch ms
[root at dhcp37-192 posix]# ll
total 0
-rw-r--r--. 1 root root 0 Jul 24 13:08 ms
[root at dhcp37-192 posix]# chmod 700 ms
[root at dhcp37-192 posix]# ll
total 0
-rwx------. 1 root root 0 Jul 24 13:08 ms
[root at dhcp37-192 posix]# getfattr -n glusterfs.posix.acl
/mnt/ganesha33_disperse/posix/ms 
getfattr: Removing leading '/' from absolute path names
# file: mnt/ganesha33_disperse/posix/ms
glusterfs.posix.acl="u::rwx,g::---,o::---"

[root at dhcp37-192 posix]# su user1
[user1 at dhcp37-192 posix]$ getfattr -n glusterfs.posix.acl
/mnt/ganesha33_disperse/posix/ms 
getfattr: Removing leading '/' from absolute path names
# file: mnt/ganesha33_disperse/posix/ms
glusterfs.posix.acl="u::rwx,g::---,o::---"

Moving this bug to verified state.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=sMdMqePtL8&a=cc_unsubscribe