lustre/tests/acl/inheritance.test

   1 ACL inheritance test.  Run these tests on a filesystem with ACL support.
   2
   3
   4         $ id -u
   5         > 0
   6
   7         $ mkdir d
   8         $ setfacl -d -m group:bin:r-x d
   9         $ getfacl d
  10         > # file: d
  11         > # owner: root
  12         > # group: root
  13         > user::rwx
  14         > group::r-x
  15         > other::r-x
  16         > default:user::rwx
  17         > default:group::r-x
  18         > default:group:bin:r-x
  19         > default:mask::r-x
  20         > default:other::r-x
  21         >
  22
  23         $ mkdir d/subdir
  24         $ getfacl d/subdir
  25         > # file: d/subdir
  26         > # owner: root
  27         > # group: root
  28         > user::rwx
  29         > group::r-x
  30         > group:bin:r-x
  31         > mask::r-x
  32         > other::r-x
  33         > default:user::rwx
  34         > default:group::r-x
  35         > default:group:bin:r-x
  36         > default:mask::r-x
  37         > default:other::r-x
  38         >
  39
  40         $ touch d/f
  41         $ ls -l d/f | awk -- '{ print $1 }'
  42         > -rw-r--r--+
  43         $ getfacl d/f
  44         > # file: d/f
  45         > # owner: root
  46         > # group: root
  47         > user::rw-
  48         > group::r-x    #effective:r--
  49         > group:bin:r-x #effective:r--
  50         > mask::r--
  51         > other::r--
  52         >
  53
  54         $ su bin
  55         $ echo i >> d/f
  56         > d/f: Permission denied
  57
  58 Changed by CFS: (1). reduce the tree level to 2 (for shortening
  59 time of local tests). (2). add one more getfacl test since dir
  60 might be distributed around MDS's.
  61
  62         $ su
  63         $ rm d/f
  64         $ rmdir d/subdir
  65         $ mv d tree
  66         $ ./make-tree
  67         $ getfacl tree/dir0/dir5/file4
  68         > # file: tree/dir0/dir5/file4
  69         > # owner: root
  70         > # group: root
  71         > user::rw-
  72         > group::r-x    #effective:r--
  73         > group:bin:r-x #effective:r--
  74         > mask::r--
  75         > other::r--
  76         >
  77         $ getfacl tree/dir0/dir6/file4
  78         > # file: tree/dir0/dir6/file4
  79         > # owner: root
  80         > # group: root
  81         > user::rw-
  82         > group::r-x    #effective:r--
  83         > group:bin:r-x #effective:r--
  84         > mask::r--
  85         > other::r--
  86         >
  87         $ echo i >> tree/dir6/dir2/file2
  88         $ echo i > tree/dir1/f
  89         $ ls -l tree/dir1/f | awk -- '{ print $1 }'
  90         > -rw-r--r--+
  91         $ su bin
  92         $ echo i > tree/dir6/dir2/f
  93         > tree/dir6/dir2/f: No such file or directory
  94         $ su
  95
  96         $ rm -rf tree
  97
  98
  99 Original scripts, comment out by CFS.
 100 #
 101 #        $ su
 102 #        $ rm d/f
 103 #        $ rmdir d/subdir
 104 #        $ mv d tree
 105 #        $ ./make-tree
 106 #        $ getfacl tree/dir0/dir5/dir7/file4
 107 #       > # file: tree/dir0/dir5/dir7/file4
 108 #       > # owner: root
 109 #       > # group: root
 110 #       > user::rw-
 111 #       > group::r-x    #effective:r--
 112 #       > group:bin:r-x #effective:r--
 113 #       > mask::r--
 114 #       > other::r--
 115 #       >
 116 #       $ echo i >> tree/dir6/dir2/dir1/file2
 117 #       $ echo i > tree/dir1/f
 118 #       $ ls -l tree/dir1/f | awk -- '{ print $1 }'
 119 #       > -rw-r--r--+
 120 #       $ su bin
 121 #       $ echo i > tree/dir6/dir2/f
 122 #       > tree/dir6/dir2/f: No such file or directory
 123 #       $ su
 124 #
 125 #        $ rm -rf tree
 126
 127
 128
 129