Skip to main content
NetApp Knowledge Base

Permission denied when listing snapshots on directory monitored by Prolion

Views:
81
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas
Last Updated:

Applies to

  • ONTAP 9
  • NFS
  • FPolicy
  • ProLion CryptoStrike

Issue

  • Root user gets permission denied when listing snapshot directory, but not volume:

[root@vserver ~]# ls -la /volume/.snapshot/
total 44
drwxrwxrwx 11 root root 4096 Mar  1 13:05 .
drwxrwxrwx  4 root root 4096 Feb  1 14:19 ..
drwxrwxrwx  4 root root 4096 Feb  1 14:19 daily.2024-02-29_0010
drwxrwxrwx  4 root root 4096 Feb  1 14:19 daily.2024-03-01_0010
drwxrwxrwx  4 root root 4096 Feb  1 14:19 hourly.2024-03-01_0805
drwxrwxrwx  4 root root 4096 Feb  1 14:19 hourly.2024-03-01_0905
drwxrwxrwx  4 root root 4096 Feb  1 14:19 hourly.2024-03-01_1005
drwxrwxrwx  4 root root 4096 Feb  1 14:19 hourly.2024-03-01_1105
drwxrwxrwx  4 root root 4096 Feb  1 14:19 hourly.2024-03-01_1205
drwxrwxrwx  4 root root 4096 Feb  1 14:19 hourly.2024-03-01_1305
drwxrwxrwx  4 root root 4096 Feb  1 14:19 weekly.2024-02-25_0015

[root@vserver ~]# ls -la /volume/.snapshot/daily.2024-03-01_0010/
ls: cannot access /volume/.snapshot/daily.2024-03-01_0010/: Permission denied

  • Prolion Cryptostrike antiransomware is enabled on affected VServer with Fpolicy:

cluster1::> vserver fpolicy show
FPolicy Server- Server-
Vserver Policy Node Server status type
--------------- ------------------------------- ------------ ----------------- -------------- -----------
Vserver Prolion_CS_POLICY_ACTIVE_nfs Node1 10.0.0.1 connected primary

 

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.