Permission denied when listing snapshots on directory monitored by Prolion
Applies to
- ONTAP 9
- NFS
- FPolicy
- ProLion CryptoStrike
Issue
- Root user gets permission denied when listing snapshot directory, but not volume:
[root@vserver ~]# ls -la /volume/.snapshot/
total 44
drwxrwxrwx 11 root root 4096 Mar 1 13:05 .
drwxrwxrwx 4 root root 4096 Feb 1 14:19 ..
drwxrwxrwx 4 root root 4096 Feb 1 14:19 daily.2024-02-29_0010
drwxrwxrwx 4 root root 4096 Feb 1 14:19 daily.2024-03-01_0010
drwxrwxrwx 4 root root 4096 Feb 1 14:19 hourly.2024-03-01_0805
drwxrwxrwx 4 root root 4096 Feb 1 14:19 hourly.2024-03-01_0905
drwxrwxrwx 4 root root 4096 Feb 1 14:19 hourly.2024-03-01_1005
drwxrwxrwx 4 root root 4096 Feb 1 14:19 hourly.2024-03-01_1105
drwxrwxrwx 4 root root 4096 Feb 1 14:19 hourly.2024-03-01_1205
drwxrwxrwx 4 root root 4096 Feb 1 14:19 hourly.2024-03-01_1305
drwxrwxrwx 4 root root 4096 Feb 1 14:19 weekly.2024-02-25_0015
[root@vserver ~]# ls -la /volume/.snapshot/daily.2024-03-01_0010/
ls: cannot access /volume/.snapshot/daily.2024-03-01_0010/: Permission denied
- Prolion Cryptostrike antiransomware is enabled on affected VServer with Fpolicy:
cluster1::> vserver fpolicy show
FPolicy Server- Server-
Vserver Policy Node Server status type
--------------- ------------------------------- ------------ ----------------- -------------- -----------
Vserver Prolion_CS_POLICY_ACTIVE_nfs Node1 10.0.0.1 connected primary