]> git.apps.os.sepia.ceph.com Git - ceph.git/commit
cephfs: disallow removing root_squash via "fs authorize" cmd 59672/head
authorRishabh Dave <ridave@redhat.com>
Thu, 11 Jul 2024 18:28:22 +0000 (23:58 +0530)
committerRishabh Dave <ridave@redhat.com>
Wed, 18 Sep 2024 12:26:53 +0000 (17:56 +0530)
commita8198ace710f7ce0af6219df2674b226f87f4f87
tree4eef90878a2ae25b8a86551f231f59194c3a9cd8
parent2b96fdc8d5bbf12f68653dd8339fd0ec7fe616b8
cephfs: disallow removing root_squash via "fs authorize" cmd

Removing root_squasn from MDS auth caps through "fs authorize" command
should not be allowed as this command it not allowed to/meant for
removing caps.

Fixes: https://tracker.ceph.com/issues/65808
Signed-off-by: Rishabh Dave <ridave@redhat.com>
(cherry picked from commit c6e2c97c6e9cbf1e37c53d5d490d65091205928c)

Conflict:

- qa/tasks/cephfs/test_admin.py
  Test test_idem_unaffected_root_squash (which was fixed by this commit)
  was disabled on the main branch since it was buggy. But that wasn't
  the case with squid branch.
src/mds/MDSAuthCaps.cc