Suhas Athani has uploaded this change for review.

View Change

FSAL_VFS: Correct root-squash privilege handling for mknod and
setattr paths

This patch corrects several permission failures in FSAL_VFS when
root_squash is enabled aiming to fix pynfs failures - LOOKCHAR,
LOOKBLK, SATT18 (part of BZ - 2415390)..

- Ensure mknod uses original_creds so that device creation works
when the client’s real user is root.
- Allow SETATTR (size, mode, ownership) when the squashed request
originated from root.
- Improve ACL-less fallback:
- Allow WRITE_ACL/WRITE_ATTR based on write permission.
- Permit WRITE_OWNER only when the original caller was root.

Change-Id: I4c07e4bc5f3980f7319c8495431d3106cf93dec6
Signed-off-by: Suhas Athani <Suhas.Athani@ibm.com>
---
M src/FSAL/FSAL_VFS/handle.c
M src/FSAL/fsal_helper.c
2 files changed, 129 insertions(+), 14 deletions(-)

git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/27/1227827/1

To view, visit change 1227827. To unsubscribe, or for help writing mail filters, visit settings.

Gerrit-MessageType: newchange
Gerrit-Project: ffilz/nfs-ganesha
Gerrit-Branch: next
Gerrit-Change-Id: I4c07e4bc5f3980f7319c8495431d3106cf93dec6
Gerrit-Change-Number: 1227827
Gerrit-PatchSet: 1
Gerrit-Owner: Suhas Athani <Suhas.Athani@ibm.com>