Hello,

On Mon, 12 Mar 2012 19:56:14 -0400 Kevin Stone wrote:
> The invalid argument on chmod in fuse is fixed here:
> 
> http://www.orangefs.org/trac/orangefs/changeset/9212

Thanks, it works. Though I found a way to bypass file read
permissions using fuse client:

1) Mount pvfs2 using pvfs2-client.
2) do as root:
# touch secret_file
# chmod 0600 secret_file
# echo secret_data > secret_file
3) do as user:
$ pvfs2fuse -o fs_spec="tcp://host:3334/pvfs2-fs" mountpoint
$ ll secret_file 
-rw------- 0 root root 12 Mar 13 19:58 secret_file
$ cat secret_file 
secret_data

Parent directory is owned by root.
This works only for data read, you can't delete or modify file.
pvfs2-client works normally.
This doesn't work for directories, files only.
With default_permissions fuse option this also works as expected.

I know, security is not a primary goal for PFVS2 and most of
distributed file systems, but nevertheless it will be good to fix
this as well.

Best regards,
Andrew Savchenko

Attachment: pgpzDamEKH9a2.pgp
Description: PGP signature

_______________________________________________
Pvfs2-users mailing list
[email protected]
http://www.beowulf-underground.org/mailman/listinfo/pvfs2-users

Reply via email to