Actions
Feature #10679
openAdd support for the chattr +i command (immutable file)
Status:
New
Priority:
Normal
Assignee:
Category:
Correctness/Safety
Target version:
% Done:
0%
Source:
Community (user)
Tags:
Backport:
reef,quincy
Reviewed:
Affected Versions:
Component(FS):
MDS
Labels (FS):
task(intern), task(medium)
Pull request ID:
Description
To add an additional layer of protection for files I would like to see
support for the chattr +i command added for files stored in cephfs
Multiple emails were posted to the ceph mail list on this subject including:
http://article.gmane.org/gmane.comp.file-systems.ceph.user/16836
http://article.gmane.org/gmane.comp.file-systems.ceph.user/16848
http://article.gmane.org/gmane.comp.file-systems.ceph.user/16856
http://article.gmane.org/gmane.comp.file-systems.ceph.user/16861
Of the suggestions made on the mail list, I like Sage's where he states:
It seems like we should be checking S_IMMUTABLE in the MDS and,
when set, refusing to issue write caps.
Which I think is better then just trusting the clients to do the
checking.
Actions