Skip to content

cephfs: disallow removing root_squash via "fs authorize" cmd#58543

Merged
vshankar merged 1 commit intoceph:mainfrom
rishabh-d-dave:tracker-65808
Sep 2, 2024
Merged

cephfs: disallow removing root_squash via "fs authorize" cmd#58543
vshankar merged 1 commit intoceph:mainfrom
rishabh-d-dave:tracker-65808

Conversation

@rishabh-d-dave
Copy link
Contributor

@rishabh-d-dave rishabh-d-dave commented Jul 11, 2024

Removing root_squasn from MDS auth caps through "fs authorize" command
should not be allowed as this command it not allowed to/meant for
removing caps.

Fixes: https://tracker.ceph.com/issues/65808

Contribution Guidelines

  • To sign and title your commits, please refer to Submitting Patches to Ceph.

  • If you are submitting a fix for a stable branch (e.g. "quincy"), please refer to Submitting Patches to Ceph - Backports for the proper workflow.

  • When filling out the below checklist, you may click boxes directly in the GitHub web UI. When entering or editing the entire PR message in the GitHub web UI editor, you may also select a checklist item by adding an x between the brackets: [x]. Spaces and capitalization matter when checking off items this way.

Checklist

  • Tracker (select at least one)
    • References tracker ticket
    • Very recent bug; references commit where it was introduced
    • New feature (ticket optional)
    • Doc update (no ticket needed)
    • Code cleanup (no ticket needed)
  • Component impact
    • Affects Dashboard, opened tracker ticket
    • Affects Orchestrator, opened tracker ticket
    • No impact that needs to be tracked
  • Documentation (select at least one)
    • Updates relevant documentation
    • No doc update is appropriate
  • Tests (select at least one)
Show available Jenkins commands
  • jenkins retest this please
  • jenkins test classic perf
  • jenkins test crimson perf
  • jenkins test signed
  • jenkins test make check
  • jenkins test make check arm64
  • jenkins test submodules
  • jenkins test dashboard
  • jenkins test dashboard cephadm
  • jenkins test api
  • jenkins test docs
  • jenkins render docs
  • jenkins test ceph-volume all
  • jenkins test ceph-volume tox
  • jenkins test windows
  • jenkins test rook e2e

Removing root_squasn from MDS auth caps through "fs authorize" command
should not be allowed as this command it not allowed to/meant for
removing caps.

Fixes: https://tracker.ceph.com/issues/65808
Signed-off-by: Rishabh Dave <ridave@redhat.com>
@rishabh-d-dave
Copy link
Contributor Author

Just a rebase since make check has been failing with unrelated on old branches despite of re-runs.

@vshankar
Copy link
Contributor

This PR is under test in https://tracker.ceph.com/issues/67257.

@vshankar
Copy link
Contributor

@rishabh-d-dave please add Introduced-by: <sha> tag in the commit.

@vshankar
Copy link
Contributor

vshankar commented Aug 2, 2024

This PR is under test in https://tracker.ceph.com/issues/67318.

joscollin pushed a commit to joscollin/ceph that referenced this pull request Aug 7, 2024
* refs/pull/58543/head:
	cephfs: disallow removing root_squash via "fs authorize" cmd
vshankar added a commit to vshankar/ceph that referenced this pull request Aug 20, 2024
* refs/pull/58543/head:
	cephfs: disallow removing root_squash via "fs authorize" cmd
@vshankar
Copy link
Contributor

jenkins test docs

@vshankar
Copy link
Contributor

vshankar commented Sep 2, 2024

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants