client: userland clients are only allowed to read if fscrypt is enabled

For now the userland clients hasn't support the fscrypt yet, they
will be only allowed to read the encrypted files.

Signed-off-by: Xiubo Li <xiubli@redhat.com>

diff --git a/src/client/Client.cc b/src/client/Client.cc
index 38881a8fb899281b939ac0f057608f76e62d95c7..857ae774c4af6a58b6106179c317886055dff4f8 100644 (file)
--- a/src/client/Client.cc
+++ b/src/client/Client.cc
@@ -3498,8 +3498,10 @@ int Client::get_caps(Fh *fh, int need, int want, int *phave, loff_t endoff)
       waitfor_caps = true;
     }
 
-    if ((need & CEPH_CAP_FILE_WR) && in->auth_cap &&
-       in->auth_cap->session->readonly)
+    if ((need & CEPH_CAP_FILE_WR) &&
+       ((in->auth_cap && in->auth_cap->session->readonly) ||
+        // userland clients are only allowed to read if fscrypt enabled
+        in->is_fscrypt_enabled()))
       return -CEPHFS_EROFS;
 
     if (in->flags & I_CAP_DROPPED) {