cloudbeat icon indicating copy to clipboard operation
cloudbeat copied to clipboard

[KPMS] failed to get file time data, error - %woperation not permitted

Open romulets opened this issue 2 years ago • 0 comments

Motivation About

example

failed to get file time data, error - %woperation not permitted

It looks like there are files which we don't have permissions to perform the Stat operation.

Recommended add more context to the log line.

By the frequency of the logs looks like multiple files don't grant permission to this operation.

The impact is limited as the only non fetched information is time related https://github.com/elastic/cloudbeat/blob/76d45cfdd23158a894152d79e0d995d6e2a17b77/resources/fetching/fetchers/k8s/file_system_fetcher.go#L230-L254

Definition of done

  • [ ] Understand which files don't have permissions
  • [ ] Grant permissions if needed
  • [ ] Maybe move this log line to warn

Related tasks/epics

  • Found on https://github.com/elastic/security-team/issues/8219#issuecomment-1870039617
  • Investigated on https://github.com/elastic/security-team/issues/7932#issuecomment-1871106944

romulets avatar Dec 28 '23 13:12 romulets