Project

General

Profile

Feature #9029

min/max uid for snapshot creation

Added by Wido den Hollander over 3 years ago. Updated over 1 year ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
08/06/2014
Due date:
% Done:

50%

Spent time:
Source:
Development
Tags:
cephfs,snapshot
Backport:
Reviewed:
User Impact:
Affected Versions:
Release:
Component(FS):
Needs Doc:
No

Description

On shared systems like shared hosting it might be useful to prevent regular users from creating snapshots on CephFS.

A rogue user might create thousands of snapshots using a lot of space or even be a DoS for a MDS.

A min_uid/max_uid setting for the MDS or mount parameter for the kernel module might be useful to limit the creation of snapshots.

Associated revisions

Revision 6bd2b0fc (diff)
Added by Wido den Hollander over 3 years ago

mds: Make min/max UID configurable for who is allowed to create a snapshot

This way administrators can configure which UIDs are allowed to create
snapshots on CephFS.

In certain situations it might be desirable that regular users are not allowed
to create snapshots. For example on shared hosting environments.

Fixes: #9029

Revision 214630b1 (diff)
Added by Wido den Hollander over 3 years ago

mds: Also check min/max uid on snap removal

Not only check if the uid is correct when creating a snapshot, but also
verify if the UID is correct when trying to remove a snapshot.

Fixes: #9029

History

#1 Updated by Wido den Hollander over 3 years ago

  • Status changed from New to Testing
  • % Done changed from 0 to 50

#2 Updated by Sage Weil over 3 years ago

  • Status changed from Testing to Resolved
  • Source changed from other to Development

#3 Updated by John Spray over 1 year ago

  • Project changed from Ceph to fs
  • Category deleted (1)

Bulk updating project=ceph category=mds bugs so that I can remove the MDS category from the Ceph project to avoid confusion.

Also available in: Atom PDF