Received: by 2002:a05:6358:3188:b0:123:57c1:9b43 with SMTP id q8csp8263391rwd; Tue, 20 Jun 2023 12:31:31 -0700 (PDT) X-Google-Smtp-Source: ACHHUZ4iLD4dwWu7HVE8oDskAj8cO9D4MFINA0Vs6rS5Cdwfj4Bz2wPqGPBLvU3vOBXalUSr5xGE X-Received: by 2002:a17:902:e88f:b0:1b6:6b90:7c2f with SMTP id w15-20020a170902e88f00b001b66b907c2fmr4556763plg.55.1687289491083; Tue, 20 Jun 2023 12:31:31 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1687289491; cv=none; d=google.com; s=arc-20160816; b=Cbp7DPWMceX21WzVvi1Y0YlkUCxGkd5deDCF5b3hsZjJQDGvnZIPMhTCovXV9V9irT 9QdPXpkWKHar+pAV0O/7uQhwdM443DejKcupMJTUZpiLoQ0nYBAwDyYXQs5lg4GsJ1ri dSegaNZoPVkjdj7CcnKYE15sMiIIr6uTobRS7zgyt/aNXEqj9lNgMi3mpSNjPcuvKSGQ uLopmvV2WA9TiB9aEY9CCQvT5ma4j8yx7TfgVdt8wzNxA9VR0Bk7fBWO03st3Z4DKr8q vqShUBwrHVbwRzaj7u4qBSQdrO512YE93OPUPI8uKuriPHlQRyRd6uiaL9pKF1nMcmZR wiEg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:mime-version:date :message-id:subject:references:in-reply-to:cc:to:from:dkim-signature; bh=PH9U1GciLcffQVM1V+VcYCG1trbS8e6bKZdDd69R6dI=; b=EcUEbxnIuW+Y4uiZfhz47cbLSVg+1MA51Hvkba02mb8eSUv7OlUkNeIkLKcMBnBZlS DCefJYPSOguAGI0/CCT4MoPTvL3/7QKmnoo0d7CoAHGt/vbpv8qXbE+QNSplBoETFEd9 Ct7Q9YJuUw0+2JszBQBYru+zeCdUFDk6G07/1mNLpNgeibb5XiEG+J6QVVHUy+buuBz8 UNxtHOEg2clvvg6m1TQPBf6NYt1xMAILDLQuq0XYoKPJZ91PVsQl4mP0O9WwFUcMJKsn 2/zKd6yLqvHLDdAm1+9xV7cvsZumc5l+0r1d3XNefpTRzxDuMXUKbpO+/+bWeq0oooKF WAJQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@kernel-dk.20221208.gappssmtp.com header.s=20221208 header.b=ATqqGY9A; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id g12-20020a170902e38c00b001b02e044c87si1337342ple.320.2023.06.20.12.31.18; Tue, 20 Jun 2023 12:31:31 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel-dk.20221208.gappssmtp.com header.s=20221208 header.b=ATqqGY9A; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S230040AbjFTSvI (ORCPT + 99 others); Tue, 20 Jun 2023 14:51:08 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:40986 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229595AbjFTSvG (ORCPT ); Tue, 20 Jun 2023 14:51:06 -0400 Received: from mail-io1-xd31.google.com (mail-io1-xd31.google.com [IPv6:2607:f8b0:4864:20::d31]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id B7E10DC for ; Tue, 20 Jun 2023 11:51:05 -0700 (PDT) Received: by mail-io1-xd31.google.com with SMTP id ca18e2360f4ac-77dcff76e35so60549239f.1 for ; Tue, 20 Jun 2023 11:51:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel-dk.20221208.gappssmtp.com; s=20221208; t=1687287065; x=1689879065; h=content-transfer-encoding:mime-version:date:message-id:subject :references:in-reply-to:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=PH9U1GciLcffQVM1V+VcYCG1trbS8e6bKZdDd69R6dI=; b=ATqqGY9AdErY3+V3xe8TN6ttF0o+pvdPmlUkdxyCa5io+mq0rg7bRw2Xy4jgO0opMA QBaB7RQ6ZuCQOeJ/HF9a5H23Q5uh01/37miwin2YumX1MfZLsr6YlXqHG7w/cXzxjvNo IHv0Njxrp9WnJ749bL31QSGfo5Xfjt4RwlBj89aMZyIAvU6Ll5qXaU2Lk/Ka5OZUjxjE l8mGM7WejTahIq1+Riluhwk5Y+gdjWQ+5TtdkKLd0zAQ18Ot1NQAR0Sp7foI0gI8OIKW sahO7zFw+SHCFOUByd72fRNlxx6sURBT16n0dGag083QfuPvnYPfM+FrSBm10bcKz/ah Ub8Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1687287065; x=1689879065; h=content-transfer-encoding:mime-version:date:message-id:subject :references:in-reply-to:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=PH9U1GciLcffQVM1V+VcYCG1trbS8e6bKZdDd69R6dI=; b=Ad5D/j6GAEr9HnTK5UGlD3FVTHxfe1z2bfxtLhyOVLwt0jd53tmI7u5CrmqvAmBkiB E6F5ZgMmV/TMHrw6sIAWlbeiMhAy4q019mdIaSUexArx9Bu5Niiksbe9ZYM4IT4RHykx H/Q2SkKSf4pQW9j5h4oM1FXLh4KPukn3l+d0A9qDScRR19X8dbGts0rTfsgZ/4puTjKT l2QUGpacPFoUd3chwCFUuDlRUuY+lA7thXkS4CSX0sEj/frkMbzVOvflKJjLLPpgHsLR ZH0dsj2FsxnklZi5ZPqGoTPksgYPmaFnj4hHTTNBd6h06fGvS3jKny/ed/a/Q1hfO6Hv zr5w== X-Gm-Message-State: AC+VfDydGwB6kFJPWeYUEUM78HRa+RdbfMCRGhd87rpwMp8+bg+zaA0Q vCkuUYJmsOUUkv6G6rMbbWW1b2gS3oY93zcai00= X-Received: by 2002:a6b:b744:0:b0:77e:23a7:c9eb with SMTP id h65-20020a6bb744000000b0077e23a7c9ebmr10423206iof.0.1687287065127; Tue, 20 Jun 2023 11:51:05 -0700 (PDT) Received: from [127.0.0.1] ([96.43.243.2]) by smtp.gmail.com with ESMTPSA id g8-20020a02c548000000b004266ca33533sm781009jaj.108.2023.06.20.11.51.04 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 20 Jun 2023 11:51:04 -0700 (PDT) From: Jens Axboe To: hch@lst.de, linux-block@vger.kernel.org, Jingbo Xu Cc: linux-kernel@vger.kernel.org, tianjia.zhang@linux.alibaba.com, xiang@kernel.org, casey@schaufler-ca.com In-Reply-To: <20230613084008.93795-1-jefflexu@linux.alibaba.com> References: <20230613084008.93795-1-jefflexu@linux.alibaba.com> Subject: Re: [PATCH v3 0/2] block: fine-granular CAP_SYS_ADMIN for Persistent Reservation ioctl Message-Id: <168728706409.3766608.15899699355172012689.b4-ty@kernel.dk> Date: Tue, 20 Jun 2023 12:51:04 -0600 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit X-Mailer: b4 0.13-dev-c6835 X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, 13 Jun 2023 16:40:06 +0800, Jingbo Xu wrote: > changes since v2: > - patch 1: disallow reservations on partitions entirely and make it into > a separate patch (hch) > - patch 2: rebase to hch's series of converting fmode_t to blk_mode_t > and execute permission check upon blk_mode_t (hch) > > changes since RFC: > - only allow unprivileged reservations if the file descriptor is open > for write (Christoph Hellwig) > - refuse the unprivileged reservations on partitions (Christoph Hellwig) > (maybe this checking shall also be done when CAP_SYS_ADMIN is set?) > > [...] Applied, thanks! [1/2] block: disallow Persistent Reservation on partitions commit: 12629621669b239445727256d1a5dab616b30deb [2/2] block: fine-granular CAP_SYS_ADMIN for Persistent Reservation commit: 9a72a02456a839676fe8f220a44ef00951596047 Best regards, -- Jens Axboe