Suhas Athani has uploaded this change for review.
FSAL_VFS: Correct root-squash privilege handling for mknod and
setattr paths
This patch corrects several permission failures in FSAL_VFS when
root_squash is enabled aiming to fix pynfs failures - LOOKCHAR,
LOOKBLK, SATT18 (part of BZ - 2415390)..
- Ensure mknod uses original_creds so that device creation works
when the client’s real user is root.
- Allow SETATTR (size, mode, ownership) when the squashed request
originated from root.
- Improve ACL-less fallback:
- Allow WRITE_ACL/WRITE_ATTR based on write permission.
- Permit WRITE_OWNER only when the original caller was root.
Change-Id: I4c07e4bc5f3980f7319c8495431d3106cf93dec6
Signed-off-by: Suhas Athani <Suhas.Athani@ibm.com>
---
M src/FSAL/FSAL_VFS/handle.c
M src/FSAL/fsal_helper.c
2 files changed, 129 insertions(+), 14 deletions(-)
git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/27/1227827/1
To view, visit change 1227827. To unsubscribe, or for help writing mail filters, visit settings.