Hello,

is it possible prevent cephfs client to mount the root of a cephfs
filesystem and browse through it?

We want to restrict cephfs clients to a particular directory, but when
we define a specific cephx auth key for a client we need to add the
following caps: "mds 'allow r'" which then gives the client also the
possibility to mount the root for cephfs and inspect it.

Are we missing something or is this by design?


Best,
Martin
_______________________________________________
ceph-users mailing list
[email protected]
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

Reply via email to