[
https://issues.apache.org/jira/browse/TS-3509?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14486367#comment-14486367
]
Bryan Call edited comment on TS-3509 at 4/9/15 1:52 AM:
--------------------------------------------------------
Confirmed with strace:
{code}
[bcall@l1]$ egrep 'setreuid|dm-4' ~/out
getuid() = 0
setreuid(99, 99) = 0
getuid() = 99
geteuid() = 99
capget(0x20080522, 0, NULL) = -1 EFAULT (Bad address)
capset(0x20080522, 0, {CAP_NET_BIND_SERVICE|CAP_NET_ADMIN|CAP_IPC_LOCK,
CAP_DAC_OVERRIDE|CAP_NET_BIND_SERVICE|CAP_NET_ADMIN|CAP_IPC_LOCK, 0}) = 0
open("/dev/dm-4", O_RDONLY) = -1 EACCES (Permission denied)
{code}
was (Author: bcall):
Confirmed with strace:
{code}
[bcall@l1 trafficserver]$ egrep 'setreuid|dm-4' ~/out
setreuid(99, 99) = 0
open("/dev/dm-4", O_RDONLY) = -1 EACCES (Permission denied)
{code}
> Access permissions for storage entries in cache.config changed
> --------------------------------------------------------------
>
> Key: TS-3509
> URL: https://issues.apache.org/jira/browse/TS-3509
> Project: Traffic Server
> Issue Type: Bug
> Components: Cache
> Affects Versions: 5.3.0
> Reporter: Bryan Call
> Priority: Blocker
> Fix For: 5.3.0
>
>
> It looks like 5.3.0 drops from root before opening up the disk storage now:
> {code}
> [Apr 8 23:52:33.227] Server {0x7ff106a86800} DEBUG: (cache_init)
> Store::read_config: "/dev/dm-4"
> [Apr 8 23:52:33.227] Server {0x7ff106a86800} DEBUG: (cache_init)
> Store::read_config - ns = new Span; ns->init("/dev/dm-4",-1), forced volume=-1
> [Apr 8 23:52:33.227] Server {0x7ff106a86800} DEBUG: (cache_init)
> Store::read_config - could not initialize storage "/dev/dm-4" [unable to
> access file]
> [bcall@l1 ~]$ ll /dev/dm-4
> brw-rw---- 1 root disk 253, 4 Apr 8 23:52 /dev/dm-4
> [bcall@l1 ~]$ chmod 666 /dev/dm-4
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
