Skip to content
This repository has been archived by the owner on Mar 30, 2023. It is now read-only.

Persistent buffers can be given the wrong group permissions #76

Open
jsteel44 opened this issue Aug 7, 2019 · 5 comments
Open

Persistent buffers can be given the wrong group permissions #76

jsteel44 opened this issue Aug 7, 2019 · 5 comments
Labels
bug Something isn't working

Comments

@jsteel44
Copy link
Contributor

jsteel44 commented Aug 7, 2019

It looks like a gid is assumed to be the same as a uid and so my persistent buffers have group rwx given to the wrong group. This could also lead to the chown failing if the gid doesn't exist.

Per-job buffers are unaffected. You can see below the gid is, and should be different to the uid but it incorrectly matches on the persistent buffer.

Example user:

$ id
uid=17121 gid=17124

Buffers:

/dac/2307_job:
total 4
drwxrwx--- 2 17121 17124 4096 Aug  7 12:19 global

/dac/2307_persistent_jsteel:
total 4
drwxrwx--- 2 17121 17121 4096 Aug  7 10:17 global
@JohnGarbutt JohnGarbutt added the bug Something isn't working label Aug 12, 2019
@JohnGarbutt
Copy link
Collaborator

Hmm, I thought this one had been fixed already...
7b66bbf

Need to double check we populate Volume.Group with the correct value.

@jsteel44
Copy link
Contributor Author

Yes the group chown looks like it is happening but the group is being populated incorrectly. I'll leave that one with you but in case it's any help, here's a stab in the dark:

internal/pkg/dacctl/actions/actions.go: request.Group = request.User

@JohnGarbutt
Copy link
Collaborator

After further discussion, we actually need to change how we do the chown etc, it needs to happen on buffer create, not on buffer mount.

@jsteel44
Copy link
Contributor Author

It looks like a persistent buffer is created with 700 permissions now and group is set to root (at least on the global directory). If that is intended that works for me.

@JohnGarbutt
Copy link
Collaborator

Hmm, not sure about the root group. I was expecting it to be what Slurm specified.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants