Markus Weich: > just to sum up again: as user fred2, I did: mkdir d1 d2 home; touch home/f1 > as root, I did: mount -t aufs -o br=d1:home none d2 > root@it1-pc40:$ find d1 d2 home -printf "%h/%f %M %u %g\n" > ./d1 drwxr-xr-x fred2 users > d1/.wh..wh.plnk drwx------ root root > d1/.wh..wh.aufs -r--r--r-- root root > d1/.wh..wh.orph drwx------ root root > ./d2 drwxr-xr-x fred2 users > d2/f1 -rw-r--r-- fred2 users > ./home drwxr-xr-x fred2 users > home/f1 -rw-r--r-- fred2 users > > rm d2/f1 --> leads to "operation not permitted"
On my test system which is - aufs3.9 locally modified version - on ext2 branches $ mkdir d1 d2 home; touch home/f1 $ sudo mount -t aufs -o br=d1:home none d2 [sudo] password for xxx: aufs: module verification failed: signature and/or required key missing - tainting kernel aufs 3.9 $ find d1 d2 home -printf "%h/%f %M %u %g\n" ./d1 drwxr-xr-x xxx xxx d1/.wh..wh.aufs -r--r--r-- root root d1/.wh..wh.plnk drwx------ root root find: `d1/.wh..wh.plnk': Permission denied d1/.wh..wh.orph drwx------ root root find: `d1/.wh..wh.orph': Permission denied ./d2 drwxr-xr-x xxx xxx d2/f1 -rw-r--r-- xxx xxx ./home drwxr-xr-x xxx xxx home/f1 -rw-r--r-- xxx xxx $ rm d2/f1 rm: remove regular empty file `d2/f1'? y $ As far as I know, there have never been a report such simple operation fails. So I guess there may exist a restriction or limitation out of aufs. For example, LSM configuration or ubuntu specific settings. For more investigation, we need to find the systemcall which returned the error as a first step. Could you post the output of "strace rm d2/f1"? Currently I guess it is unlink(2). And if I make a debug print patch to identify which module caused the error, could you apply and test it on your side? > Kernel is 3.2.0-45-generic-pae from ubuntu 12.04 standard installation, > the dirs are on ext4. Aufs Version is version 3.x-rcN-20111205. According to git://kernel.ubuntu.com/ubuntu/ubuntu-precise.git, the latest ubuntu-precise should print "aufs3.2 20120109". It means that you are using a little older ubuntu-precise. But I don't know it is a problem. J. R. Okajima ------------------------------------------------------------------------------ See everything from the browser to the database with AppDynamics Get end-to-end visibility with application monitoring from AppDynamics Isolate bottlenecks and diagnose root cause in seconds. Start your free trial of AppDynamics Pro today! http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk