[OpenAFS] permission to run 'fs examine'

2016-03-19 Thread Richard Brittain
I discovered an apparent change in the access control on "fs examine" recently. The docs say you need 'r' access on the root of the volume for this to work, and that definitely used to work. We use this inside a wrapper script for more convenient quota checking, and I was used to getting the

Re: [OpenAFS] permission to run 'fs examine'

2016-03-19 Thread Jeffrey Altman
This change occurred in 2012. See http://gerrit.openafs.org/7705 The "fs examine" command causes the cache manager to issue a RXAFS_GetVolumeStatus RPC. The returned data is publicly accessible via the volserver RPCs so there was no benefit to locking it down via the fileserver RPCs. The

Re: [OpenAFS] permission to run 'fs examine'

2016-03-19 Thread Stephan Wiesand
In the stable release series for Unix it actually happened mid 2013, with the 1.6.4 release. The relevant passage in the release notes was: * Allow the fileserver to return volume data like quota or free space, which is available publicly elsewhere, without the additional access

Re: [OpenAFS] permission to run 'fs examine'

2016-03-18 Thread Michael Meffie
On Thu, 17 Mar 2016 22:48:49 +0100 Stephan Wiesand wrote: > In the stable release series for Unix it actually happened mid 2013, with the > 1.6.4 release. The relevant passage in the release notes was: > > * Allow the fileserver to return volume data like quota or

Re: [OpenAFS] permission to run 'fs examine'

2016-03-18 Thread Richard Brittain
Thanks. I figured it was probably benign. -- Richard Brittain, Research Computing Group, IT Services, 37 Dewey Field Road, HB6219 Dartmouth College, Hanover NH 03755 richard.britt...@dartmouth.edu 603-646-2085This change occurred in 2012. See