[gpfsug-discuss] quota on secondary groups for a user?

Buterbaugh, Kevin L Kevin.Buterbaugh at Vanderbilt.Edu
Wed Aug 3 19:55:01 BST 2016


JAB,

The set group id bit is tangential to my point.  I expect GPFS to count any files a user owns against their user quota.  If they are a member of multiple groups then I also expect it to count it against the group quota of whatever group is associated with that file.  I.e., if they do a chgrp then GPFS should subtract from one group and add to another.

Kevin

On Aug 3, 2016, at 1:46 PM, Jonathan Buzzard <jonathan at buzzard.me.uk<mailto:jonathan at buzzard.me.uk>> wrote:

On 03/08/16 19:06, Buterbaugh, Kevin L wrote:
Hi Sven,

Wait - am I misunderstanding something here?  Let’s say that I have
“user1” who has primary group “group1” and secondary group “group2”.
And let’s say that they write to a directory where the bit on the
directory forces all files created in that directory to have group2
associated with them.  Are you saying that those files still count
against group1’s group quota???


Yeah, but bastard user from hell over here then does

chgrp group1 myevilfile.txt

and your set group id bit becomes irrelevant because it is only ever indicative. In fact there is nothing that guarantees the set group id bit is honored because there is nothing stopping the user or a program coming in immediately after the file is created and changing that. Not pointing fingers at the OSX SMB client when Unix extensions are active on a Samba server in any way there.

As such Unix group quotas are in the real world a total waste of space. This is if you ask me why XFS and Lustre have project quotas and GPFS has file sets.

JAB.

--
Jonathan A. Buzzard                 Email: jonathan (at) buzzard.me.uk<http://buzzard.me.uk>
Fife, United Kingdom.
_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org<http://spectrumscale.org>
http://gpfsug.org/mailman/listinfo/gpfsug-discuss

—
Kevin Buterbaugh - Senior System Administrator
Vanderbilt University - Advanced Computing Center for Research and Education
Kevin.Buterbaugh at vanderbilt.edu<mailto:Kevin.Buterbaugh at vanderbilt.edu> - (615)875-9633



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20160803/2f63c782/attachment-0002.htm>


More information about the gpfsug-discuss mailing list