Hi, My ocfs2 filesystem does not apply default acl to parent files & folders. 1. ofcs2 is mounted with acl and user_xattr (/dev/etherd/e2.1 on /datashare type ocfs2 (rw,_netdev,user_xattr,acl,heartbeat=local)) 2. some directory on the fs has assigned default acl for tcpdump user: user::rwx user:tcpdump:rw- group::r-x mask::rwx other::r-x default:user::rwx default:user:tcpdump:rw- default:group::r-x default:mask::rwx default:other::r-x 3. When I made subfolder it should inherits permissions. But getfacl shows me: user::rwx group::rwx other::r-x default:user::rwx default:user:tcpdump:rw- default:group::r-x default:mask::rwx default:other::r-x As you can see default inheritance is moved to child, but permission are not inherited from parent. There is missing user:tcpdump:rw- Could you tell me what is missed ? It is my fault, or ocfs2 bug ? I tested it using kernel 2.6.34 and 2.6.32, and tools 1.4.4 and newest one from git. debugfs.ocfs2 -R "stats" - lists xattr in section "Feature Incompat" - it suggest that I miss something ? Thanks for help Pawel Z
Hi, again Is someone who use ACL on OCFS2 ? PZ On 2010-07-08 23:36, Pawel wrote:> Hi, > My ocfs2 filesystem does not apply default acl to child files& folders. > > 1. ofcs2 is mounted with acl and user_xattr (/dev/etherd/e2.1 on > /datashare type ocfs2 (rw,_netdev,user_xattr,acl,heartbeat=local)) > 2. some directory on the fs has assigned default acl for tcpdump user: > user::rwx > user:tcpdump:rw- > group::r-x > mask::rwx > other::r-x > default:user::rwx > default:user:tcpdump:rw- > default:group::r-x > default:mask::rwx > default:other::r-x > 3. When I made subfolder it should inherits permissions. But getfacl > shows me: > user::rwx > group::rwx > other::r-x > default:user::rwx > default:user:tcpdump:rw- > default:group::r-x > default:mask::rwx > default:other::r-x > > As you can see > default inheritance is moved to child, > but permission are not inherited from parent. There is missing > user:tcpdump:rw- > > Could you tell me what is missed ? > It is my fault, or ocfs2 bug ? > > I tested it using kernel 2.6.34 and 2.6.32, and tools 1.4.4 and newest > one from git. > debugfs.ocfs2 -R "stats" - lists xattr in section "Feature Incompat" > - it suggest that I miss something ? > > Thanks for help > Pawel Z > > > > _______________________________________________ > Ocfs2-users mailing list > Ocfs2-users at oss.oracle.com > http://oss.oracle.com/mailman/listinfo/ocfs2-users > >
Hi, Pawel, I have ran a test about acl and now I am sure it is a new bug in mainline since 2.6.33.3. Now I am working on this issue. Thanks, tiger On 07/09/2010 11:14 AM, Pawel wrote:> Hi, again > Is someone who use ACL on OCFS2 ? > > Could you tell me what is missed ? > It is my fault, or ocfs2 bug ? > > I tested it using kernel 2.6.34 and 2.6.32, and tools 1.4.4 and newest > one from git. >
Hi, Alfonso, I think all kernel has acl inherit problem until the patch merge to the stable kernel tree. Now this patch is waiting the merge window to merge into the mainline. So, the only way to fix this issue is patch the kernel. For versions before 2.6.33.3, need patch attached two patches. From 2.6.33.3 to 2.6.35, only need patch the second patch. Regards, tiger On 08/12/2010 04:13 PM, Alfonso Escribano wrote:> Hi Tiger, > I have a problem with ocfs2 acl inherit with kernel 2.6.35 and > ocfs2-tools 1.4.3, ubuntu lucid. > Iwant to know what can I do to have correct acl inherit. > > I have try with kernels 2.6.32 and 2.6.35 without success, do you know > any kernel wiouth acl inherit problem? > > Thanks, > Alfonso Escribano. >-------------- next part -------------- A non-text attachment was scrubbed... Name: 0001-ocfs2-set-i_mode-on-disk-during-acl-operations.patch Type: text/x-patch Size: 3961 bytes Desc: not available Url : http://oss.oracle.com/pipermail/ocfs2-users/attachments/20100812/75ce6e76/attachment.bin -------------- next part -------------- A non-text attachment was scrubbed... Name: 0002-ocfs2-do-not-overwrite-error-codes-in-ocfs2_init_ac.patch Type: text/x-patch Size: 1408 bytes Desc: not available Url : http://oss.oracle.com/pipermail/ocfs2-users/attachments/20100812/75ce6e76/attachment-0001.bin
Hi tiger, I have test it with kernel 2.6.32-server from ubuntu lucid and it works without problems. Thanks, Alfonso Escribano Tiger Yang wrote:> Hi, Alfonso, > > I think all kernel has acl inherit problem until the patch merge to > the stable kernel tree. Now this patch is waiting the merge window to > merge into the mainline. > So, the only way to fix this issue is patch the kernel. > For versions before 2.6.33.3, need patch attached two patches. > From 2.6.33.3 to 2.6.35, only need patch the second patch. > > Regards, > tiger > > On 08/12/2010 04:13 PM, Alfonso Escribano wrote: >> Hi Tiger, >> I have a problem with ocfs2 acl inherit with kernel 2.6.35 and >> ocfs2-tools 1.4.3, ubuntu lucid. >> Iwant to know what can I do to have correct acl inherit. >> >> I have try with kernels 2.6.32 and 2.6.35 without success, do you >> know any kernel wiouth acl inherit problem? >> >> Thanks, >> Alfonso Escribano. >> > >-- Alfonso Escribano Merino Meteologica SA C. Heliotropo, 5 28029 Madrid Movil +34 691 06 01 74 Tel. +34 914 561 001 Fax. +34 914 561 002 alfons at meteologica.es ________________________________________________________________ LOPD y LSSI De acuerdo con la legislaci?n vigente en materia de Protecci?n de Datos de Car?cter Personal (Ley 15/1999 del 13 de Diciembre), le informamos que su direcci?n de correo electr?nico y los mensajes que pudi?ramos recibir, pasar?n a formar parte de un fichero denominado EMAILS, del que es responsable Meteol?gica, S.A. Puede ejercer sus derechos de acceso, cancelaci?n, modificaci?n y oposici?n en la direcci?n postal C/ Heliotropo, 5 bajo, 28029 - Madrid Telf. 914.56.10.01 Fax 914.56.10.02. La finalidad de ?ste fichero es la de realizar una correcta gesti?n y prestaci?n de los servicios ofrecidos por Meteol?gica, S.A. a sus clientes, no cedi?ndose en ning?n momento los datos facilitados. ________________________________________________________________
Hi, Alfonso, But ocfs2 in 2.6.32 has another bug of acl. When you unmount ocfs2, all acls will lost. So I suggest you patch those two patches. BTW: The versions of the kernel I said are the stable linux kernel in kernel.org. Thanks, tiger 08/12/2010 06:43 PM, Alfonso Escribano wrote:> Hi tiger, > > I have test it with kernel 2.6.32-server from ubuntu lucid and it > works without problems. > > Thanks, > Alfonso Escribano > > Tiger Yang wrote: >> Hi, Alfonso, >> >> I think all kernel has acl inherit problem until the patch merge to >> the stable kernel tree. Now this patch is waiting the merge window >> to merge into the mainline. >> So, the only way to fix this issue is patch the kernel. >> For versions before 2.6.33.3, need patch attached two patches. >> From 2.6.33.3 to 2.6.35, only need patch the second patch. >> >> Regards, >> tiger >> >> On 08/12/2010 04:13 PM, Alfonso Escribano wrote: >>> Hi Tiger, >>> I have a problem with ocfs2 acl inherit with kernel 2.6.35 and >>> ocfs2-tools 1.4.3, ubuntu lucid. >>> Iwant to know what can I do to have correct acl inherit. >>> >>> I have try with kernels 2.6.32 and 2.6.35 without success, do you >>> know any kernel wiouth acl inherit problem? >>> >>> Thanks, >>> Alfonso Escribano. >>> >> >> >