Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753578Ab2EBLDV (ORCPT ); Wed, 2 May 2012 07:03:21 -0400 Received: from mx1.redhat.com ([209.132.183.28]:62631 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753224Ab2EBLDU (ORCPT ); Wed, 2 May 2012 07:03:20 -0400 Message-ID: <4FA11454.2010103@redhat.com> Date: Wed, 02 May 2012 13:02:44 +0200 From: Paolo Bonzini User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:12.0) Gecko/20120425 Thunderbird/12.0 MIME-Version: 1.0 To: Alan Cox CC: Jan Kara , Jens Axboe , LKML , James Bottomley , linux-scsi@vger.kernel.org Subject: Re: [PATCH] scsi: Silence unnecessary warnings about ioctl to partition References: <1335953452-10460-1-git-send-email-jack@suse.cz> <4FA1092E.9090603@redhat.com> <20120502115447.7dcc3a54@pyramind.ukuu.org.uk> In-Reply-To: <20120502115447.7dcc3a54@pyramind.ukuu.org.uk> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1517 Lines: 31 Il 02/05/2012 12:54, Alan Cox ha scritto: >>> > > Since I have seen warnings from lots of commands, including some proprietary >>> > > userspace applications, I don't think disallowing the ioctls for processes >>> > > with CAP_SYS_RAWIO will happen in the near future if ever. So lets just >>> > > stop warning for processes with CAP_SYS_RAWIO for which ioctl is allowed. >> > >> > NACK. I would bet that all the warnings you've seen are for ioctl that >> > would have failed anyway with ENOTTY. > Then we don't need the bogus warning do we. Sure, but then disallowing the ioctls for processes with CAP_SYS_RAWIO will not cause regressions and _can_ happen. The transition period only needs to be prolonged for SG_IO, the only one that was reported in the wild, until people have time to fix their bugs or (I hope not) we give up and implement a very restrictive filter for SCSI commands sent to partition. The right patch is one that prepares for these step, http://permalink.gmane.org/gmane.linux.kernel/1254625 for example. It leaves the warning only for SG_IO, and silently blocks the rest (more rationale in the commit message there). However, that patch should be applied only at the beginning of the merge window, not at the end of the release cycle. Paolo -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/