From: Luis Henriques <lhenriques@suse.de>
To: virtio-fs@redhat.com
Subject: [Virtio-fs] Question on ACLs support in virtiofs
Date: Fri, 12 Feb 2021 10:30:13 +0000 [thread overview]
Message-ID: <87r1llk28a.fsf@suse.de> (raw)
Hi!
I've recently executed the generic fstests on virtiofs and decided to have
a closer look at generic/099 failure. In a nutshell, here's the sequence
of commands that reproduce that failure:
# umask 0
# mkdir acldir
# chacl -b "u::rwx,g::rwx,o::rwx" "u::r-x,g::r--,o::---" acldir
# touch acldir/file1
# umask 722
# touch acldir/file2
# ls -l acldir
total 0
-r--r----- 1 root root 0 Feb 12 10:04 file1
----r----- 1 root root 0 Feb 12 10:05 file2
The failure is that setting umask to 722 shouldn't affect the new file2
because acldir has a default ACL (from umask(2): "... if the parent
directory has a default ACL (see acl(5)), the umask is ignored...").
So... I tried to have look at the code, and initially I thought that the
problem was in (kernel) function fuse_create_open(), where we have this:
if (!fm->fc->dont_mask)
mode &= ~current_umask();
but then I went down the rabbit hole, into the user-space code, and
couldn't reach a conclusion. Maybe the issue is that there's in fact no
support for this POSIX ACLs in virtiofs/FUSE? Any ideas?
Cheers,
--
Luis
next reply other threads:[~2021-02-12 10:30 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-02-12 10:30 Luis Henriques [this message]
2021-02-15 20:52 ` [Virtio-fs] Question on ACLs support in virtiofs Vivek Goyal
2021-02-15 20:52 ` Vivek Goyal
2021-02-16 15:11 ` Miklos Szeredi
2021-02-16 15:11 ` Miklos Szeredi
2021-02-16 15:54 ` Vivek Goyal
2021-02-17 20:08 ` Dr. David Alan Gilbert
2021-02-17 20:08 ` Dr. David Alan Gilbert
2021-02-17 20:52 ` Vivek Goyal
2021-02-17 20:52 ` Vivek Goyal
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87r1llk28a.fsf@suse.de \
--to=lhenriques@suse.de \
--cc=virtio-fs@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.