Comments (6)
The trash scatter-tree dirs should probably just be world-writable. Fuse won't let anyone see them directly, and the MD FS will be hidden from view on the interactive nodes.
For ease-of-use outside LANL, we should have admins create the top-level dir with the whatever ownership/access is desired, such that all users in the relevant namespaces will be able to create files there. (This is not something we can guess.) Then when fuse generates the "scatter tree" below that, it should just perpetuate those features to the subdirs.
from marfs.
Added comments to the Install Doc.
from marfs.
Please determine what the ownership of the trash should be. Document that in the design document in the Documentation folder.
from marfs.
What came out of our meeting a few days ago was that the bottom level of the tree should be world-writable, not-listable, not readable. (So, maybe chown root:root, chmod 702 ?) Files written to the trash should be chmod'ed to make them readable only by the owner. (So, maybe chmod 400.)
from marfs.
Jeff and I talked about this and tried a few experiments. Based on some initial experimentation, the upper level (and subsequent) directory could be set to 701 permissions with the lowest level directory set to 703. A user can create a file in the lowest level but cannot list the directory. The user can list (ls) the file if they know the full path and filename. One potential issue is the the user can change permissions of the file (to write or executable) which could lead to other non-desirable consequences.
Note the top level directory world execute permission must be set (701) in order for the user to create and/or list (ls) the file.
from marfs.
In order to mess this up one would have to have access to the underlying GPFS metadata file system. MarFS prevents this without escalating to root.
We need to have the admins set the permissions as necessary to enforce the functionality we want.
Only need to revisit this if we have to use FUSE mount directly on interactive FTA and it is exposed to a user if the FUSE mount crashes.
from marfs.
Related Issues (20)
- return-codes from str_2_post(), etc, should distinguish version-mismatch from other errors
- marfs_statvfs() should reflect quota-limitations HOT 1
- Installation checker HOT 1
- sync_ and close_data() failures are masked HOT 2
- clean-up: always build with DAL/MDAL HOT 1
- Multiple Simultaneous Writers HOT 6
- rename / unlink bug HOT 1
- strip out DAL/MDAL build-options HOT 1
- misconfigured RDMA auth-file gets ENODATA from fuse
- MarFS trash semantics - HOT 2
- the system calls getxattr("security.capability") on every FUSE write()! HOT 1
- marfs_rename() should do trash_truncate on the destination HOT 9
- Pftool Libxml Include Requires Subdir HOT 1
- GC Rewrite: Per-Namespace Trash
- Quota Tool Modification: Per-Namespace Trash
- MarFS should do more in the setup process HOT 1
- Create a single node MarFS example
- Move documentation for MarFS online HOT 1
- Line wrap in install doc doesn't work as expected HOT 1
- Change multi line commands in tutorial to be one command HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from marfs.