CephFS Path Restriction, can still read all files

[Boris Mattijssen <b.mattijssen@xxxxxxxxxxxxx>]

Hi all,

I'm trying to use path restriction on CephFS, running a Ceph Jewel (ceph version 10.2.5) cluster. 

For this I'm using the command specified in the official docs (http://docs.ceph.com/docs/jewel/cephfs/client-auth/):

ceph auth get-or-create client.boris mon 'allow r' mds 'allow r, allow rw path=/boris' osd 'allow rw pool=cephfs_data'

When I mount the fs with boris user and the generated secret I can still see all files in the fs (not just the files in /boris).

l am restricted to write to anything but /boris, so the problem is that I can still read anything outside of /boris. 

Can someone please clarify what's going on?

Thanks in advance,

Boris

_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com