On Thu, 29 Mar 2012, Tomasz Paszkowski wrote: > Hi, > > I'am working on improving security level for ceph (osd and mon). Are > there any specific consideratons to run ceph-osd and ceph-mon as non > root user with apparmor profile ? There is no reason these can't run as non-root users. The only requirement is that for ceph-osd, if you are using btrfs, you need to mount with '-o user_subvol_rm_allowed'. Beyond that, I'm not familiar enough with apparmor to know what specific considerations there may be. sage -- To unsubscribe from this list: send the line "unsubscribe ceph-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
