[OpenAFS-devel] GetVolumeStatus privileges

Christopher D. Clausen cclausen@acm.org
Sat, 12 Jul 2008 03:50:17 -0500


Isn't most of that information available for unauthenticated users from 
vos listvol?  Why restrict it when using a different command?

<<CDC

Jeffrey Altman <jaltman@secure-endpoints.com> wrote:
> Read makes sense.   The FS - CM Programmer's Reference doesn't specify
> what the privileges should be so I would go with the code.
>
> Please file a bug report to openafs-bugs@openafs.org.  If you are
> really nice you will include a patch to the man pages.
>
> Jeffrey Altman
>
>
> Andrew Deason wrote:
>> The documentation for several commands:
>>
>>  - fs diskfree
>>  - fs examine
>>  - fs listquota
>>  - fs quota
>>
>> says that the required privilege for successfully executing these is
>> "l", even as far back as the IBM documentation. However, all of these
>> use the GetVolumeStatus RPC, which requires PRSFS_READ, even as far
>> back as IBM AFS as far as I can tell (src/viced/afsfileprocs.c
>> SRXAFS_GetVolumeStatus).
>>
>> Which should it be, r or l? I don't really imagine either way causing
>> problems, but the documentation and code should be consistent,
>> shirley.