Suhas Athani has uploaded this change for review. (
https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1227827?usp=email )
Change subject: FSAL_VFS: Correct root-squash privilege handling for mknod and setattr
paths
......................................................................
FSAL_VFS: Correct root-squash privilege handling for mknod and
setattr paths
This patch corrects several permission failures in FSAL_VFS when
root_squash is enabled aiming to fix pynfs failures - LOOKCHAR,
LOOKBLK, SATT18 (part of BZ - 2415390)..
- Ensure mknod uses original_creds so that device creation works
when the client’s real user is root.
- Allow SETATTR (size, mode, ownership) when the squashed request
originated from root.
- Improve ACL-less fallback:
- Allow WRITE_ACL/WRITE_ATTR based on write permission.
- Permit WRITE_OWNER only when the original caller was root.
Change-Id: I4c07e4bc5f3980f7319c8495431d3106cf93dec6
Signed-off-by: Suhas Athani <Suhas.Athani(a)ibm.com>
---
M src/FSAL/FSAL_VFS/handle.c
M src/FSAL/fsal_helper.c
2 files changed, 129 insertions(+), 14 deletions(-)
git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/27/1227827/1
--
To view, visit
https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1227827?usp=email
To unsubscribe, or for help writing mail filters, visit
https://review.gerrithub.io/settings?usp=email
Gerrit-MessageType: newchange
Gerrit-Project: ffilz/nfs-ganesha
Gerrit-Branch: next
Gerrit-Change-Id: I4c07e4bc5f3980f7319c8495431d3106cf93dec6
Gerrit-Change-Number: 1227827
Gerrit-PatchSet: 1
Gerrit-Owner: Suhas Athani <Suhas.Athani(a)ibm.com>