Hello,
On středa 24. května 2017 13:18:47 CEST Libor Klepáč wrote:
> Hi,
> after quiet two months , another crash, trace is same as before.
> There are no XFS lines before this, kern.log goes back to 23. april.
>
---snip trace----
>
> After filesystem shutdown, before reboot i have upgraded kernel to
4.9.25-1~bpo8+1
>
> Customer was calling us, just when nagios alerted us on host problem, that
he was copying some files between accounts (which means changing acls), i have
asked him for more information.
So according to customer, he was on ssh and was copying files from one
customer account to another dedicated for development, using midnight
commander.
It involves changing file ACLs.
original dir acl
##getfacl .
# file: .
# owner: cust1
# group: cust1
# flags: -s-
user::rwx
user:backup:--x
user:cust1:rwx
group::rwx
group:www-data:r-x
group:cust1:rwx
mask::rwx
other::---
default:user::rwx
default:user:backup:--x
default:user:cust1:rwx
default:group::rwx
default:group:www-data:r-x
default:group:cust1:rwx
default:mask::rwx
default:other::r-x
destination dir acls
# getfacl .
# file: .
# owner: admin-ssh
# group: www-data
user::rwx
user:backup:--x
group::rwx
group:www-data:rwx
mask::rwx
other::r-x
default:user::rwx
default:user:backup:--x
default:group::rwx
default:group:www-data:rwx
default:mask::rwx
default:other::r-x
----
user admin-ssh is member of www-data group so he can copy from customer dir
Libor
��.n��������+%������w��{.n�����{����� jg��� �����ݢj����G���� ���j:+v���w�m������w�������h�����٥
