Project

General

Profile

Feature #9029

min/max uid for snapshot creation

Added by Wido den Hollander almost 4 years ago. Updated almost 2 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
08/06/2014
Due date:
% Done:

50%

Source:
Development
Tags:
cephfs,snapshot
Backport:
Reviewed:
Affected Versions:
Component(FS):
Labels (FS):

Description

On shared systems like shared hosting it might be useful to prevent regular users from creating snapshots on CephFS.

A rogue user might create thousands of snapshots using a lot of space or even be a DoS for a MDS.

A min_uid/max_uid setting for the MDS or mount parameter for the kernel module might be useful to limit the creation of snapshots.

Associated revisions

Revision 6bd2b0fc (diff)
Added by Wido den Hollander almost 4 years ago

mds: Make min/max UID configurable for who is allowed to create a snapshot

This way administrators can configure which UIDs are allowed to create
snapshots on CephFS.

In certain situations it might be desirable that regular users are not allowed
to create snapshots. For example on shared hosting environments.

Fixes: #9029

Revision 214630b1 (diff)
Added by Wido den Hollander almost 4 years ago

mds: Also check min/max uid on snap removal

Not only check if the uid is correct when creating a snapshot, but also
verify if the UID is correct when trying to remove a snapshot.

Fixes: #9029

History

#1 Updated by Wido den Hollander almost 4 years ago

  • Status changed from New to Testing
  • % Done changed from 0 to 50

#2 Updated by Sage Weil almost 4 years ago

  • Status changed from Testing to Resolved
  • Source changed from other to Development

#3 Updated by John Spray almost 2 years ago

  • Project changed from Ceph to fs
  • Category deleted (1)

Bulk updating project=ceph category=mds bugs so that I can remove the MDS category from the Ceph project to avoid confusion.

Also available in: Atom PDF