== sanity-sec test 51: FS capabilities =================== 10:13:59 (1773670439) old_cap: 0 new_cap: +cap_chown+cap_fowner+cap_dac_override+cap_dac_read_search mdt.lustre-MDT0000.enable_cap_mask=+cap_chown+cap_fowner+cap_dac_override+cap_dac_read_search mdt.lustre-MDT0001.enable_cap_mask=+cap_chown+cap_fowner+cap_dac_override+cap_dac_read_search running as uid/gid/euid/egid 500/500/500/500, groups: 500 [/mnt/lustre/d51.sanity-sec/chown] [500] [/mnt/lustre/d51.sanity-sec/f51.sanity-sec] /mnt/lustre/d51.sanity-sec/chown: changing ownership of '/mnt/lustre/d51.sanity-sec/f51.sanity-sec': Operation not permitted running as uid/gid/euid/egid 500/500/500/500, groups: 500 [/mnt/lustre/d51.sanity-sec/chown] [500] [/mnt/lustre/d51.sanity-sec/f51.sanity-sec] running as uid/gid/euid/egid 500/500/500/500, groups: 500 [/mnt/lustre/d51.sanity-sec/touch] [/mnt/lustre/d51.sanity-sec/f51.sanity-sec] /mnt/lustre/d51.sanity-sec/touch: cannot touch '/mnt/lustre/d51.sanity-sec/f51.sanity-sec': Permission denied running as uid/gid/euid/egid 500/500/500/500, groups: 500 [/mnt/lustre/d51.sanity-sec/touch] [/mnt/lustre/d51.sanity-sec/f51.sanity-sec] running as uid/gid/euid/egid 500/500/500/500, groups: 500 [/mnt/lustre/d51.sanity-sec/cat] [/mnt/lustre/d51.sanity-sec/f51.sanity-sec] /mnt/lustre/d51.sanity-sec/cat: /mnt/lustre/d51.sanity-sec/f51.sanity-sec: Permission denied running as uid/gid/euid/egid 500/500/500/500, groups: 500 [/mnt/lustre/d51.sanity-sec/cat] [/mnt/lustre/d51.sanity-sec/f51.sanity-sec] running as uid/gid/euid/egid 500/500/500/500, groups: 500 [/mnt/lustre/d51.sanity-sec/cat] [/mnt/lustre/d51.sanity-sec/f51.sanity-sec] /mnt/lustre/d51.sanity-sec/cat: /mnt/lustre/d51.sanity-sec/f51.sanity-sec: Permission denied running as uid/gid/euid/egid 500/500/500/500, groups: 500 [/mnt/lustre/d51.sanity-sec/cat] [/mnt/lustre/d51.sanity-sec/f51.sanity-sec] On MGS 192.168.201.108, active = nodemap.active=1 running as uid/gid/euid/egid 500/500/500/500, groups: 500 [/mnt/lustre/d51.sanity-sec/chown] [500] [/mnt/lustre/d51.sanity-sec/f51.sanity-sec] On MGS 192.168.201.108, default.enable_cap_mask = nodemap.default.enable_cap_mask= type: mask caps: cap_dac_read_search running as uid/gid/euid/egid 500/500/500/500, groups: 500 [/mnt/lustre/d51.sanity-sec/chown] [500] [/mnt/lustre/d51.sanity-sec/f51.sanity-sec] /mnt/lustre/d51.sanity-sec/chown: changing ownership of '/mnt/lustre/d51.sanity-sec/f51.sanity-sec': Operation not permitted On MGS 192.168.201.108, default.enable_cap_mask = nodemap.default.enable_cap_mask= type: mask caps: cap_chown,cap_dac_read_search running as uid/gid/euid/egid 500/500/500/500, groups: 500 [/mnt/lustre/d51.sanity-sec/chown] [500] [/mnt/lustre/d51.sanity-sec/f51.sanity-sec] On MGS 192.168.201.108, default.child_raise_privileges = nodemap.default.child_raise_privileges=none oleg108-server: error: invalid ioctl: 000ce063 errno: 1: Operation not permitted oleg108-server: error: nodemap_set_cap: cannot set capabilities '+cap_fowner' on nodemap 'nm_51': Operation not permitted pdsh@oleg108-client: oleg108-server: ssh exited with exit code 1 On MGS 192.168.201.108, default.child_raise_privileges = nodemap.default.child_raise_privileges=caps On MGS 192.168.201.108, active = nodemap.active=0 mdt.lustre-MDT0000.enable_cap_mask=0 mdt.lustre-MDT0001.enable_cap_mask=0