Project

General

Profile

Actions

Feature #10679

open

Add support for the chattr +i command (immutable file)

Added by Eric Eastman over 9 years ago. Updated 10 months ago.

Status:
New
Priority:
Normal
Category:
Correctness/Safety
Target version:
% Done:

0%

Source:
Community (user)
Tags:
Backport:
reef,quincy
Reviewed:
Affected Versions:
Component(FS):
MDS
Labels (FS):
task(intern), task(medium)
Pull request ID:

Description

To add an additional layer of protection for files I would like to see
support for the chattr +i command added for files stored in cephfs

Multiple emails were posted to the ceph mail list on this subject including:

http://article.gmane.org/gmane.comp.file-systems.ceph.user/16836
http://article.gmane.org/gmane.comp.file-systems.ceph.user/16848
http://article.gmane.org/gmane.comp.file-systems.ceph.user/16856
http://article.gmane.org/gmane.comp.file-systems.ceph.user/16861

Of the suggestions made on the mail list, I like Sage's where he states:

It seems like we should be checking S_IMMUTABLE in the MDS and,
when set, refusing to issue write caps.

Which I think is better then just trusting the clients to do the
checking.

Actions

Also available in: Atom PDF