You can change your ceph.conf file's permissions to only be readable by root so that you have to use sudo to run ceph commands. Configuring sudo to only work with certain commands is a simple and common practice which should be easy to implement.
On Thu, Feb 9, 2017 at 10:12 AM nigel davies <nigdav007@xxxxxxxxx> wrote:
_______________________________________________Hay AllDoes any one have an advise on hardening my ceph cluster?I have or ready doen the cephx auth part, but not sure if i can say limit my ceph user sudo permission to use only ceph commands.Any advise on this would be grateful
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
_______________________________________________ ceph-users mailing list ceph-users@xxxxxxxxxxxxxx http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com