在ProLion监控的目录上列出快照时权限被拒绝
适用场景
- ONTAP 9
- NFS
- FPolicy
- ProLion Crypto斯 特莱克
问题描述
- root用户在列出 Snapshot目录而不是卷时被拒绝:
[root@vserver ~]# ls -la /volume/.snapshot/
total 44
drwxrwxrwx 11 root root 4096 Mar 1 13:05 .
drwxrwxrwx 4 root root 4096 Feb 1 14:19 ..
drwxrwxrwx 4 root root 4096 Feb 1 14:19 daily.2024-02-29_0010
drwxrwxrwx 4 root root 4096 Feb 1 14:19 daily.2024-03-01_0010
drwxrwxrwx 4 root root 4096 Feb 1 14:19 hourly.2024-03-01_0805
drwxrwxrwx 4 root root 4096 Feb 1 14:19 hourly.2024-03-01_0905
drwxrwxrwx 4 root root 4096 Feb 1 14:19 hourly.2024-03-01_1005
drwxrwxrwx 4 root root 4096 Feb 1 14:19 hourly.2024-03-01_1105
drwxrwxrwx 4 root root 4096 Feb 1 14:19 hourly.2024-03-01_1205
drwxrwxrwx 4 root root 4096 Feb 1 14:19 hourly.2024-03-01_1305
drwxrwxrwx 4 root root 4096 Feb 1 14:19 weekly.2024-02-25_0015
[root@vserver ~]# ls -la /volume/.snapshot/daily.2024-03-01_0010/
ls: cannot access /volume/.snapshot/daily.2024-03-01_0010/: Permission denied
- 已使用Fpolicy在受影响的Vserver上启用ProLion Cryptostrike反勒索软件:
cluster1::> vserver fpolicy show
FPolicy Server- Server-
Vserver Policy Node Server status type
--------------- ------------------------------- ------------ ----------------- -------------- -----------
Vserver Prolion_CS_POLICY_ACTIVE_nfs Node1 10.0.0.1 connected primary