block: fine-granular CAP_SYS_ADMIN for Persistent Reservation
authorJingbo Xu <jefflexu@linux.alibaba.com>
Tue, 13 Jun 2023 08:40:08 +0000 (16:40 +0800)
committerJens Axboe <axboe@kernel.dk>
Tue, 20 Jun 2023 18:49:23 +0000 (12:49 -0600)
commit9a72a02456a839676fe8f220a44ef00951596047
tree6398bcf314b7fa12f026bea8a7a4f184496026f7
parent12629621669b239445727256d1a5dab616b30deb
block: fine-granular CAP_SYS_ADMIN for Persistent Reservation

Allow of unprivileged Persistent Reservation operations on devices
if the write permission check on the device node has passed.

brw-rw---- 1 root disk 259, 0 Jun 13 07:09 /dev/nvme0n1

In the example above, the "disk" group of nvme0n1 is also allowed to
make reservations on the device even without CAP_SYS_ADMIN.

Signed-off-by: Jingbo Xu <jefflexu@linux.alibaba.com>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Link: https://lore.kernel.org/r/20230613084008.93795-3-jefflexu@linux.alibaba.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
block/ioctl.c