== sanity-sec test 72c: child_raise_privileges nodemap property ========================================================== 09:42:32 (1789306952) On MGS 192.168.202.115, mgsnm.rbac = nodemap.mgsnm.rbac=file_perms,quota_ops,byfid_ops oleg215-server: error: invalid ioctl: 000ce049 errno: 1: Operation not permitted oleg215-server: error: nodemap_modify: cannot modify nodemap 'nm_test72c' to param 'admin': value '1': Operation not permitted pdsh@oleg215-client: oleg215-server: ssh exited with exit code 1 oleg215-server: error: invalid ioctl: 000ce05f errno: 1: Operation not permitted oleg215-server: error: nodemap_modify: cannot modify nodemap 'nm_test72c' to param 'rbac': value 'file_perms,quota_ops,byfid_ops,dne_ops': Operation not permitted pdsh@oleg215-client: oleg215-server: ssh exited with exit code 1 oleg215-server: error: invalid ioctl: 000ce061 errno: 1: Operation not permitted oleg215-server: error: nodemap_modify: cannot modify nodemap 'nm_test72c' to param 'child_raise_privileges': value 'trusted,admin': Operation not permitted pdsh@oleg215-client: oleg215-server: ssh exited with exit code 1 oleg215-server: error: invalid ioctl: 000ce060 errno: 1: Operation not permitted oleg215-server: error: nodemap_modify: cannot modify nodemap 'nm_test72c' to param 'deny_mount': value '0': Operation not permitted pdsh@oleg215-client: oleg215-server: ssh exited with exit code 1 On MGS 192.168.202.115, mgsnm.child_raise_privileges = nodemap.mgsnm.child_raise_privileges=trusted,dne_ops oleg215-server: error: invalid ioctl: 000ce05f errno: 1: Operation not permitted oleg215-server: error: nodemap_modify: cannot modify nodemap 'nm_test72c' to param 'rbac': value 'file_perms,quota_ops,byfid_ops,chlg_ops': Operation not permitted pdsh@oleg215-client: oleg215-server: ssh exited with exit code 1 On MGS 192.168.202.115, mgsnm.child_raise_privileges = nodemap.mgsnm.child_raise_privileges=child_raise_privs,trusted,dne_ops nodemap.active=0 nodemap.default.admin_nodemap=0 nodemap.default.audit_mode=1 nodemap.default.banlist=[] nodemap.default.child_raise_privileges=none nodemap.default.deny_mount=0 nodemap.default.deny_unknown=0 nodemap.default.dt_stats= snapshot_time 1789306969.745604031 secs.nsecs start_time 1789302878.033946045 secs.nsecs elapsed_time 4091.711657986 secs.nsecs read_bytes 1 samples [bytes] 0 0 0 0 write_bytes 3 samples [bytes] 38408 96232 206688 15926686592 read 1 samples [usecs] 112 112 112 12544 write 3 samples [usecs] 19046 27175 71607 1745679737 getattr 2 samples [usecs] 178 388 566 182228 setattr 30 samples [usecs] 74 308 4461 750259 sync 3 samples [usecs] 16 13998 14050 195945556 destroy 83 samples [usecs] 177 29987 845665 12083914525 create 4 samples [usecs] 8197 27972 61544 1171907570 statfs 1495 samples [usecs] 2 6113 38762 62588680 nodemap.default.enable_cap_mask=off nodemap.default.exports= [ { nid: 192.168.202.15@tcp, uuid: c9119edd-8ec4-45f7-9dae-3c62b2907314, dev: lustre-MDT0001 }, { nid: 192.168.202.15@tcp, uuid: c9119edd-8ec4-45f7-9dae-3c62b2907314, dev: lustre-MDT0000 }, { nid: 192.168.202.15@tcp, uuid: ec27c587-d6f1-4573-9f03-ba8c439aad28, dev: MGS }, { nid: 0@lo, uuid: lustre-MDT0000-mdtlov_UUID, dev: lustre-OST0001 }, { nid: 0@lo, uuid: lustre-MDT0001-mdtlov_UUID, dev: lustre-OST0001 }, { nid: 0@lo, uuid: lustre-MDT0001-lwp-OST0001_UUID, dev: lustre-MDT0001 }, { nid: 0@lo, uuid: lustre-MDT0000-lwp-OST0001_UUID, dev: lustre-MDT0000 }, { nid: 0@lo, uuid: lustre-MDT0000-mdtlov_UUID, dev: lustre-OST0000 }, { nid: 0@lo, uuid: lustre-MDT0001-mdtlov_UUID, dev: lustre-OST0000 }, { nid: 0@lo, uuid: lustre-MDT0001-lwp-OST0000_UUID, dev: lustre-MDT0001 }, { nid: 0@lo, uuid: lustre-MDT0000-lwp-OST0000_UUID, dev: lustre-MDT0000 }, { nid: 0@lo, uuid: lustre-MDT0000-mdtlov_UUID, dev: lustre-MDT0001 }, { nid: 0@lo, uuid: lustre-MDT0000-lwp-MDT0001_UUID, dev: lustre-MDT0000 }, { nid: 0@lo, uuid: lustre-MDT0001-mdtlov_UUID, dev: lustre-MDT0000 }, { nid: 0@lo, uuid: lustre-MDT0000-lwp-MDT0000_UUID, dev: lustre-MDT0000 }, { nid: 0@lo, uuid: 2af9e07a-cec6-4265-a68a-7c6b5a502789, dev: MGS } ] nodemap.default.fileset= [ { primary: /deffset } ] nodemap.default.forbid_encryption=0 nodemap.default.id=0 nodemap.default.map_mode=all nodemap.default.md_stats= snapshot_time 1789306969.745903146 secs.nsecs start_time 1789302840.579865081 secs.nsecs elapsed_time 4129.166038065 secs.nsecs open 30 samples [usecs] 117 2620 15723 16701977 close 29 samples [usecs] 97 1358 6879 3080385 mknod 7 samples [usecs] 531 2205 6850 9062878 unlink 5 samples [usecs] 577 935 3819 3029315 mkdir 7 samples [usecs] 1106 34494 86573 2149416417 rmdir 6 samples [usecs] 469 29754 87709 2265041919 getattr 63 samples [usecs] 1 124 3084 195866 setattr 21 samples [usecs] 248 6006 15827 42412935 getxattr 4 samples [usecs] 84 119 400 40986 statfs 748 samples [usecs] 12 1112 18791 2009983 readpage 8 samples [usecs] 3050 7404 35510 174863446 nodemap.default.rbac=file_perms,dne_ops,quota_ops,byfid_ops,chlg_ops,fscrypt_admin,server_upcall,ignore_root_prjquota,hsm_ops,immutable_flags,pool_quota_ops,lqa_quota_ops,projid_set,foreign_ops nodemap.default.readonly_mount=0 nodemap.default.squash_gid=65534 nodemap.default.squash_projid=65534 nodemap.default.squash_uid=65534 nodemap.default.trusted_nodemap=0 nodemap.mgsnm.admin_nodemap=0 nodemap.mgsnm.audit_mode=1 nodemap.mgsnm.banlist=[] nodemap.mgsnm.child_raise_privileges=child_raise_privs,trusted,dne_ops nodemap.mgsnm.deny_mount=1 nodemap.mgsnm.deny_unknown=0 nodemap.mgsnm.enable_cap_mask=off nodemap.mgsnm.exports=[] nodemap.mgsnm.fileset= [ ] nodemap.mgsnm.forbid_encryption=0 nodemap.mgsnm.gssonly_identification=0 nodemap.mgsnm.id=22 nodemap.mgsnm.identity= nodemap.mgsnm.idmap=[] nodemap.mgsnm.map_mode=all nodemap.mgsnm.offset= { start_uid: 0, limit_uid: 0, start_gid: 0, limit_gid: 0, start_projid: 0, limit_projid: 0 } nodemap.mgsnm.parent= nodemap.mgsnm.ranges=[] nodemap.mgsnm.rbac=file_perms,quota_ops,byfid_ops nodemap.mgsnm.readonly_mount=0 nodemap.mgsnm.sepol= nodemap.mgsnm.squash_gid=65534 nodemap.mgsnm.squash_projid=65534 nodemap.mgsnm.squash_uid=65534 nodemap.mgsnm.trusted_nodemap=0 nodemap.nm_test72c.admin_nodemap=0 nodemap.nm_test72c.audit_mode=1 nodemap.nm_test72c.banlist=[] nodemap.nm_test72c.child_raise_privileges=child_raise_privs,admin,trusted,dne_ops nodemap.nm_test72c.deny_mount=1 nodemap.nm_test72c.deny_unknown=0 nodemap.nm_test72c.enable_cap_mask=off nodemap.nm_test72c.exports=[] nodemap.nm_test72c.fileset= [ ] nodemap.nm_test72c.forbid_encryption=0 nodemap.nm_test72c.gssonly_identification=0 nodemap.nm_test72c.id=25 nodemap.nm_test72c.identity= nodemap.nm_test72c.idmap=[] nodemap.nm_test72c.map_mode=all nodemap.nm_test72c.offset= { start_uid: 0, limit_uid: 0, start_gid: 0, limit_gid: 0, start_projid: 0, limit_projid: 0 } nodemap.nm_test72c.parent=mgsnm nodemap.nm_test72c.ranges=[] nodemap.nm_test72c.rbac=file_perms,quota_ops,byfid_ops nodemap.nm_test72c.readonly_mount=0 nodemap.nm_test72c.sepol= nodemap.nm_test72c.squash_gid=65534 nodemap.nm_test72c.squash_projid=65534 nodemap.nm_test72c.squash_uid=65534 nodemap.nm_test72c.trusted_nodemap=0