{"id":283,"date":"2013-09-16T20:36:27","date_gmt":"2013-09-16T19:36:27","guid":{"rendered":"http:\/\/zsteva.info\/?p=283"},"modified":"2013-09-16T20:36:27","modified_gmt":"2013-09-16T19:36:27","slug":"podesavanje-privilegija-nad-lvm-particijama","status":"publish","type":"post","link":"http:\/\/zsteva.info\/blog\/2013\/09\/podesavanje-privilegija-nad-lvm-particijama\/","title":{"rendered":"Pode\u0161avanje privilegija nad LVM particijama"},"content":{"rendered":"<p>Zbog izolovanja pristupa, potrebno nam je promeniti default privilegije (root:disk 0660) nad odredjenim particijama, zapravo logi\u010dkim volumenima odredjene volumen grupe.<\/p>\n<p>Potrebno je da korisnici grupe <strong>grp01<\/strong> dobiju read\/write nad <strong>\/dev\/vg01\/part2<\/strong>.<\/p>\n<p>Prvo da vidimo \u0161ta je zapravo <strong>\/dev\/vg01\/part2<\/strong>:<\/p>\n<pre>\r\nzsteva@debian:~$ ls -la \/dev\/vg01\/part2 \r\nlrwxrwxrwx 1 root root 7 Sep 16 21:06 \/dev\/vg01\/part2 <span style=\"color: red\">-&gt; ..\/dm-4<\/span>\r\n<\/pre>\n<p>Kao \u0161to se vidi, to je simboli\u010dki link na \/dev\/dm-4.<\/p>\n<pre>\r\nzsteva@debian:~$ ls -la \/dev\/dm-4             \r\nbrw-rw---- 1 root disk <span style=\"color: red\">253, 4<\/span> Sep 16 21:06 \/dev\/dm-4\r\n<\/pre>\n<p>A \/dev\/dm-4 predstavlja block device sa minor, major brojevima 253, 4.<\/p>\n<p>Debuging <b>udev<\/b> sistema, koji pravi simboli\u010dke linkove i pode\u0161ava privilegije:<\/p>\n<pre>\r\nzsteva@debian:~$ sudo udevadm test \/sys\/dev\/block\/253\\:4\r\nrun_command: calling: test\r\nudevadm_test: version 164\r\nThis program is for debugging only, it does not run any program,\r\nspecified by a RUN key. It may show incorrect results, because\r\nsome values may be different, or not available at a simulation run.\r\n\r\nparse_file: reading '\/lib\/udev\/rules.d\/50-udev-default.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/55-dm.rules' as rules file\r\nadd_rule: NAME=\"\" is ignored, because udev will not delete any device nodes, please remove it from \/lib\/udev\/rules.d\/55-dm.rules:57\r\nparse_file: reading '\/lib\/udev\/rules.d\/56-lvm.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/60-gnupg.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/60-kpartx.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/60-persistent-alsa.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/60-persistent-input.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/60-persistent-serial.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/60-persistent-storage-dm.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/60-persistent-storage-lvm.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/60-persistent-storage-tape.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/60-persistent-storage.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/60-persistent-v4l.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/60-qemu-system.rules' as rules file\r\nparse_file: reading '\/dev\/.udev\/rules.d\/61-dev-root-link.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/61-mobile-action.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/64-md-raid.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/70-acl.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/70-hid2hci.rules' as rules file\r\nparse_file: reading '\/etc\/udev\/rules.d\/70-persistent-net.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/75-cd-aliases-generator.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/75-net-description.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/75-persistent-net-generator.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/75-probe_mtd.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/75-tty-description.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/78-sound-card.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/79-fstab_import.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/80-drivers.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/85-hwclock.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/91-permissions.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/95-keyboard-force-release.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/95-keymap.rules' as rules file\r\nparse_file: reading '\/etc\/udev\/rules.d\/95-my-lvm-perm.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/xen-backend.rules' as rules file\r\nparse_file: reading '\/lib\/udev\/rules.d\/xend.rules' as rules file\r\nudev_rules_new: rules use 27684 bytes tokens (2307 * 12 bytes), 17161 bytes buffer\r\nudev_rules_new: temporary index used 18400 bytes (920 * 20 bytes)\r\nudev_device_new_from_syspath: device 0x7fafd268dcc0 has devpath '\/devices\/virtual\/block\/dm-4'\r\nudev_device_new_from_syspath: device 0x7fafd26761b0 has devpath '\/devices\/virtual\/block\/dm-4'\r\nudev_device_read_db: device 0x7fafd26761b0 filled with db file data\r\nudev_rules_apply_to_event: LINK 'block\/253:4' \/lib\/udev\/rules.d\/50-udev-default.rules:1\r\nudev_rules_apply_to_event: IMPORT 'dmsetup_env 253 4' \/lib\/udev\/rules.d\/60-kpartx.rules:12\r\nutil_run_program: 'dmsetup_env 253 4' started\r\nutil_run_program: '\/lib\/udev\/dmsetup_env' (stdout) 'DM_UUID=LVM-lbhVtg7GsJChHSDJHYfbyX2XFwCtQTWei8AKiKZkjn1eHleETADez0k9ff1Kp9oV'\r\nutil_run_program: '\/lib\/udev\/dmsetup_env' (stdout) 'DM_TABLE_STATE=LIVE'\r\nutil_run_program: '\/lib\/udev\/dmsetup_env' (stdout) 'DM_STATE=ACTIVE'\r\nutil_run_program: '\/lib\/udev\/dmsetup_env' (stdout) 'DM_NAME=vg01-part2'\r\nutil_run_program: 'dmsetup_env 253 4' returned with exitcode 0\r\nudev_rules_apply_to_event: IMPORT 'kpartx_id 253 4 LVM-lbhVtg7GsJChHSDJHYfbyX2XFwCtQTWei8AKiKZkjn1eHleETADez0k9ff1Kp9oV' \/lib\/udev\/rules.d\/60-kpartx.rules:16\r\nutil_run_program: 'kpartx_id 253 4 LVM-lbhVtg7GsJChHSDJHYfbyX2XFwCtQTWei8AKiKZkjn1eHleETADez0k9ff1Kp9oV' started\r\nutil_run_program: '\/lib\/udev\/kpartx_id' (stdout) 'DM_TYPE=raid'\r\nutil_run_program: 'kpartx_id 253 4 LVM-lbhVtg7GsJChHSDJHYfbyX2XFwCtQTWei8AKiKZkjn1eHleETADez0k9ff1Kp9oV' returned with exitcode 0\r\nudev_rules_apply_to_event: GROUP 6 \/lib\/udev\/rules.d\/91-permissions.rules:4\r\nudev_event_execute_rules: no node name set, will use kernel supplied name 'dm-4'\r\nudev_device_update_db: created db file for '\/devices\/virtual\/block\/dm-4' in '\/dev\/.udev\/db\/block:dm-4'\r\nudev_node_update_old_links: update old name, '\/dev\/mapper\/vg01-part2' no longer belonging to '\/devices\/virtual\/block\/dm-4'\r\nlink_update: no reference left, remove '\/dev\/mapper\/vg01-part2'\r\nudev_node_update_old_links: update old name, '\/dev\/disk\/by-id\/dm-name-vg01-part2' no longer belonging to '\/devices\/virtual\/block\/dm-4'\r\nlink_update: no reference left, remove '\/dev\/disk\/by-id\/dm-name-vg01-part2'\r\nudev_node_update_old_links: update old name, '\/dev\/disk\/by-id\/dm-uuid-LVM-lbhVtg7GsJChHSDJHYfbyX2XFwCtQTWei8AKiKZkjn1eHleETADez0k9ff1Kp9oV' no longer belonging to '\/devices\/virtual\/block\/dm-4'\r\nlink_update: no reference left, remove '\/dev\/disk\/by-id\/dm-uuid-LVM-lbhVtg7GsJChHSDJHYfbyX2XFwCtQTWei8AKiKZkjn1eHleETADez0k9ff1Kp9oV'\r\nudev_node_update_old_links: update old name, '\/dev\/vg01\/part2' no longer belonging to '\/devices\/virtual\/block\/dm-4'\r\nlink_update: no reference left, remove '\/dev\/vg01\/part2'\r\nudev_node_add: creating device node '\/dev\/dm-4', devnum=253:4, mode=0660, uid=0, gid=6\r\nudev_node_mknod: preserve file '\/dev\/dm-4', because it has correct dev_t\r\nudev_node_mknod: preserve permissions \/dev\/dm-4, 060660, uid=0, gid=6\r\nnode_symlink: preserve already existing symlink '\/dev\/block\/253:4' to '..\/dm-4'\r\nudevadm_test: UDEV_LOG=6\r\nudevadm_test: DEVPATH=\/devices\/virtual\/block\/dm-4\r\nudevadm_test: MAJOR=253\r\nudevadm_test: MINOR=4\r\nudevadm_test: DEVNAME=\/dev\/dm-4\r\nudevadm_test: DEVTYPE=disk\r\nudevadm_test: ACTION=add\r\nudevadm_test: SUBSYSTEM=block\r\nudevadm_test: DEVLINKS=\/dev\/block\/253:4\r\nudevadm_test: DM_UUID=LVM-lbhVtg7GsJChHSDJHYfbyX2XFwCtQTWei8AKiKZkjn1eHleETADez0k9ff1Kp9oV\r\nudevadm_test: DM_TABLE_STATE=LIVE\r\nudevadm_test: DM_STATE=ACTIVE\r\nudevadm_test: DM_NAME=vg01-part2\r\nudevadm_test: DM_TYPE=raid\r\n<\/pre>\n<p>Iz svega ovoga mo\u017ee sva\u0161ta da se vidi, ali nas zanima ovo <b>DM_NAME=vg01-part2<\/b>. Pravljenjem fajla <b>\/etc\/udev\/rules.d\/95-my-lvm-perm.rules<\/b> sa sadr\u017eajem \u0107emo odabranom deviceu dodeliti drugu grupu:<\/p>\n<pre>\r\nENV{DM_NAME}==\"vg01-part2\", GROUP=\"grp01\"\r\n<\/pre>\n<p>Efekat mo\u017ee biti vidljiv odmah pokretanjem: <b>sudo udevadm trigger<\/b> komande.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Zbog izolovanja pristupa, potrebno nam je promeniti default privilegije (root:disk 0660) nad odredjenim particijama, zapravo logi\u010dkim volumenima odredjene volumen grupe. Potrebno je da korisnici grupe grp01 dobiju read\/write nad \/dev\/vg01\/part2. Prvo da vidimo \u0161ta je zapravo \/dev\/vg01\/part2: zsteva@debian:~$ ls -la &hellip; <a href=\"http:\/\/zsteva.info\/blog\/2013\/09\/podesavanje-privilegija-nad-lvm-particijama\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[136,6],"tags":[54,55,51,117,116],"_links":{"self":[{"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/posts\/283"}],"collection":[{"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/comments?post=283"}],"version-history":[{"count":5,"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/posts\/283\/revisions"}],"predecessor-version":[{"id":288,"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/posts\/283\/revisions\/288"}],"wp:attachment":[{"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/media?parent=283"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/categories?post=283"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/zsteva.info\/blog\/wp-json\/wp\/v2\/tags?post=283"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}