NSFS add bucket option "followSymlinks"

[guymguym]

Environment info

• NooBaa Version: master-20210505
• Platform: NA

Actual behavior

1. Currently we use stat to access the filesystem, which means that we will follow symlinks.

Expected behavior

1. Using lstat makes sure that symbolic links are not followed, which might be required to prevent trespassing over to other areas of the filesystem tree which were not exported to the user.
2. Some use cases require following links and other require avoiding it, we would want to have a configuration option whether to follow links or not.

Steps to reproduce

1. Create a symlink to /etc and behold as the S3 bucket starts reading from /etc of the endpoint pod.

More information - Screenshots / Logs / Other output

[nimrod-becker]

@guymguym is this per system configuration or per exported bucket?

[guymguym]

According to our discussion I think that per bucket since this is a security property that admins would set for the dataset.

[liranmauda]

lstat: https://github.com/noobaa/noobaa-core/pull/6588