[PATCH v3 0/2] block: fine-granular CAP_SYS_ADMIN for Persistent Reservation ioctl

From: Jingbo Xu
Date: Tue Jun 13 2023 - 04:41:07 EST


changes since v2:
- patch 1: disallow reservations on partitions entirely and make it into
a separate patch (hch)
- patch 2: rebase to hch's series of converting fmode_t to blk_mode_t
and execute permission check upon blk_mode_t (hch)

changes since RFC:
- only allow unprivileged reservations if the file descriptor is open
for write (Christoph Hellwig)
- refuse the unprivileged reservations on partitions (Christoph Hellwig)
(maybe this checking shall also be done when CAP_SYS_ADMIN is set?)


RFC: https://lore.kernel.org/all/20230609102122.118800-1-jefflexu@xxxxxxxxxxxxxxxxx/
v2: https://lore.kernel.org/all/20230612074103.4866-1-jefflexu@xxxxxxxxxxxxxxxxx/

Jingbo Xu (2):
block: disallow Persistent Reservation on partitions
block: fine-granular CAP_SYS_ADMIN for Persistent Reservation

block/ioctl.c | 47 +++++++++++++++++++++++++++++++----------------
1 file changed, 31 insertions(+), 16 deletions(-)

--
2.19.1.6.gb485710b