From 3c585bf063ccd2505cf60a7b6170d0bd63c9117d Mon Sep 17 00:00:00 2001 From: "John L. Hammond" Date: Thu, 13 Dec 2012 12:24:45 -0600 Subject: [PATCH] LU-2489 mdc: Restrict access to hsm_nl file Disallow ordinary users from writing to /proc/fs/lustre/mdc/*/hsm_nl to prevent denials of service. Signed-off-by: John L. Hammond Change-Id: Ibd37cb9365bc4583fa964b18c3d87f264d1ca33d Reviewed-on: http://review.whamcloud.com/4825 Tested-by: Hudson Tested-by: Maloo Reviewed-by: Keith Mannthey Reviewed-by: Richard Henwood Reviewed-by: Oleg Drokin --- lustre/mdc/lproc_mdc.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lustre/mdc/lproc_mdc.c b/lustre/mdc/lproc_mdc.c index 7c06298..4f25f36 100644 --- a/lustre/mdc/lproc_mdc.c +++ b/lustre/mdc/lproc_mdc.c @@ -161,7 +161,7 @@ static struct lprocfs_vars lprocfs_mdc_obd_vars[] = { { "timeouts", lprocfs_rd_timeouts, 0, 0 }, { "import", lprocfs_rd_import, lprocfs_wr_import, 0 }, { "state", lprocfs_rd_state, 0, 0 }, - { "hsm_nl", 0, mdc_wr_kuc, 0, 0, 0222 }, + { "hsm_nl", 0, mdc_wr_kuc, 0, 0, 0200 }, { "pinger_recov", lprocfs_rd_pinger_recov, lprocfs_wr_pinger_recov, 0, 0 }, { 0 } -- 1.8.3.1