search

ThinkParQ / beegfs

Public repository for the BeeGFS Parallel File System
https://www.beegfs.io
Other
90 stars 13 forks source link

Add Support for Root Squash Equivalent to Restrict Root User Privileges #3

Open coldbloodx opened 4 months ago

coldbloodx commented 4 months ago

Hey beegfs developpers: I had a question about beegfs.

For security reasons, we want to restrict root users from reading and writing to beegfs, and a switch like root squash for NFS filesystems would meet our requirements.

We do not like to export beegfs FS through NFS, because that will cause a performance drop and can not meet our requirements.

After digging through the official documentation, I don't think I've found the option :).

Now I'd like to know if there is an option in beegfs do same thing like "root_squash" in NFS? if answer is yes, can you point me the document URL? If not, is there anything else that can be used instead?

Thanks in advance.

coldbloodx commented 4 months ago

any comments on this one?

iamjoemccormick commented 4 months ago

Hi @coldbloodx, unfortunately BeeGFS does not have an equivalent to the NFS root squash option. However I'll bring this up with the team as a potential enhancement request as I agree it would be helpful for scenarios like yours.

coldbloodx commented 4 months ago

Hi @coldbloodx, unfortunately BeeGFS does not have an equivalent to the NFS root squash option. However I'll bring this up with the team as a potential enhancement request as I agree it would be helpful for scenarios like yours.

Thanks bro, will continue to keep an eye on this :).