Re: [ceph-users] CephFS Path Restriction, can still read all files

2017-01-12 Thread John Spray
On Thu, Jan 12, 2017 at 9:27 AM, Boris Mattijssen wrote: > John, > > Do you know which kernel version I need? It seems to be not working with > 4.8.15 on coreos (4.8.15-coreos) (I also tested on 4.7.3). > I can confirm that it works using the ceph-fuse client, but I

Re: [ceph-users] CephFS Path Restriction, can still read all files

2017-01-12 Thread Boris Mattijssen
John, Do you know which kernel version I need? It seems to be not working with 4.8.15 on coreos (4.8.15-coreos) (I also tested on 4.7.3). I can confirm that it works using the ceph-fuse client, but I need the kernel client to work since I want to mount using Kubernetes ;) Btw, this is the error

Re: [ceph-users] CephFS Path Restriction, can still read all files

2017-01-11 Thread Boris Mattijssen
Ah right, I was using the the kernel client on kernel 3.x Thanks for the answer. I'll try updating tomorrow and will let you know if it works! Cheers, Boris On Wed, Jan 11, 2017 at 1:03 PM John Spray wrote: > On Wed, Jan 11, 2017 at 11:39 AM, Boris Mattijssen >

Re: [ceph-users] CephFS Path Restriction, can still read all files

2017-01-11 Thread John Spray
On Wed, Jan 11, 2017 at 11:39 AM, Boris Mattijssen wrote: > Hi Brukhard, > > Thanks for your answer. I've tried two things now: > * ceph auth get-or-create client.boris mon 'allow r' mds 'allow r path=/, > allow rw path=/boris' osd 'allow rw pool=cephfs_data'. This is

Re: [ceph-users] CephFS Path Restriction, can still read all files

2017-01-11 Thread Burkhard Linke
Hi, On 01/11/2017 12:39 PM, Boris Mattijssen wrote: Hi Brukhard, Thanks for your answer. I've tried two things now: * ceph auth get-or-create client.boris mon 'allow r' mds 'allow r path=/, allow rw path=/boris' osd 'allow rw pool=cephfs_data'. This is according to your suggestion. I am

Re: [ceph-users] CephFS Path Restriction, can still read all files

2017-01-11 Thread Boris Mattijssen
Hi Brukhard, Thanks for your answer. I've tried two things now: * ceph auth get-or-create client.boris mon 'allow r' mds 'allow r path=/, allow rw path=/boris' osd 'allow rw pool=cephfs_data'. This is according to your suggestion. I am however now still able to mount the root path and read all

Re: [ceph-users] CephFS Path Restriction, can still read all files

2017-01-11 Thread Burkhard Linke
Hi, On 01/11/2017 11:02 AM, Boris Mattijssen wrote: Hi all, I'm trying to use/path restriction/ on CephFS, running a Ceph Jewel (ceph version 10.2.5) cluster. For this I'm using the command specified in the official docs (http://docs.ceph.com/docs/jewel/cephfs/client-auth/): ceph auth