Project

General

Profile

Feature #9029

min/max uid for snapshot creation

Added by Wido den Hollander over 9 years ago. Updated over 7 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
% Done:

50%

Source:
Development
Tags:
cephfs,snapshot
Backport:
Reviewed:
Affected Versions:
Component(FS):
Labels (FS):
Pull request ID:

Description

On shared systems like shared hosting it might be useful to prevent regular users from creating snapshots on CephFS.

A rogue user might create thousands of snapshots using a lot of space or even be a DoS for a MDS.

A min_uid/max_uid setting for the MDS or mount parameter for the kernel module might be useful to limit the creation of snapshots.

Associated revisions

Revision 6bd2b0fc (diff)
Added by Wido den Hollander over 9 years ago

mds: Make min/max UID configurable for who is allowed to create a snapshot

This way administrators can configure which UIDs are allowed to create
snapshots on CephFS.

In certain situations it might be desirable that regular users are not allowed
to create snapshots. For example on shared hosting environments.

Fixes: #9029

Revision 214630b1 (diff)
Added by Wido den Hollander over 9 years ago

mds: Also check min/max uid on snap removal

Not only check if the uid is correct when creating a snapshot, but also
verify if the UID is correct when trying to remove a snapshot.

Fixes: #9029

History

#1 Updated by Wido den Hollander over 9 years ago

  • Status changed from New to 7
  • % Done changed from 0 to 50

#2 Updated by Sage Weil over 9 years ago

  • Status changed from 7 to Resolved
  • Source changed from other to Development

#3 Updated by John Spray over 7 years ago

  • Project changed from Ceph to CephFS
  • Category deleted (1)

Bulk updating project=ceph category=mds bugs so that I can remove the MDS category from the Ceph project to avoid confusion.

Also available in: Atom PDF