From: John L. Hammond <jhammond@tacc.utexas.edu>
Date: Thu, 13 Dec 2012 18:24:45 +0000 (-0600)
Subject: LU-2489 mdc: Restrict access to hsm_nl file
X-Git-Tag: 2.3.59~66
X-Git-Url: https://git.whamcloud.com/?p=fs%2Flustre-release.git;a=commitdiff_plain;h=3c585bf063ccd2505cf60a7b6170d0bd63c9117d;hp=be025f5580a0cc4958267d2e4317aac4e2ebc0c3

LU-2489 mdc: Restrict access to hsm_nl file

Disallow ordinary users from writing to /proc/fs/lustre/mdc/*/hsm_nl
to prevent denials of service.

Signed-off-by: John L. Hammond <jhammond@tacc.utexas.edu>
Change-Id: Ibd37cb9365bc4583fa964b18c3d87f264d1ca33d
Reviewed-on: http://review.whamcloud.com/4825
Tested-by: Hudson
Tested-by: Maloo <whamcloud.maloo@gmail.com>
Reviewed-by: Keith Mannthey <keith.mannthey@intel.com>
Reviewed-by: Richard Henwood <richard.henwood@intel.com>
Reviewed-by: Oleg Drokin <green@whamcloud.com>
---

diff --git a/lustre/mdc/lproc_mdc.c b/lustre/mdc/lproc_mdc.c
index 7c06298..4f25f36 100644
--- a/lustre/mdc/lproc_mdc.c
+++ b/lustre/mdc/lproc_mdc.c
@@ -161,7 +161,7 @@ static struct lprocfs_vars lprocfs_mdc_obd_vars[] = {
         { "timeouts",        lprocfs_rd_timeouts,    0, 0 },
         { "import",          lprocfs_rd_import,      lprocfs_wr_import, 0 },
         { "state",           lprocfs_rd_state,       0, 0 },
-        { "hsm_nl",          0, mdc_wr_kuc,          0, 0, 0222 },
+	{ "hsm_nl",          0, mdc_wr_kuc,          0, 0, 0200 },
         { "pinger_recov",    lprocfs_rd_pinger_recov,
                              lprocfs_wr_pinger_recov, 0, 0 },
         { 0 }