Suhas Athani has uploaded this change for review. ( https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1227827?usp=email ) Change subject: FSAL_VFS: Correct root-squash privilege handling for mknod and setattr paths ...................................................................... FSAL_VFS: Correct root-squash privilege handling for mknod and setattr paths This patch corrects several permission failures in FSAL_VFS when root_squash is enabled aiming to fix pynfs failures - LOOKCHAR, LOOKBLK, SATT18 (part of BZ - 2415390).. - Ensure mknod uses original_creds so that device creation works when the client’s real user is root. - Allow SETATTR (size, mode, ownership) when the squashed request originated from root. - Improve ACL-less fallback: - Allow WRITE_ACL/WRITE_ATTR based on write permission. - Permit WRITE_OWNER only when the original caller was root. Change-Id: I4c07e4bc5f3980f7319c8495431d3106cf93dec6 Signed-off-by: Suhas Athani <Suhas.Athani@ibm.com> --- M src/FSAL/FSAL_VFS/handle.c M src/FSAL/fsal_helper.c 2 files changed, 129 insertions(+), 14 deletions(-) git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/27/1227827/1 -- To view, visit https://review.gerrithub.io/c/ffilz/nfs-ganesha/+/1227827?usp=email To unsubscribe, or for help writing mail filters, visit https://review.gerrithub.io/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: ffilz/nfs-ganesha Gerrit-Branch: next Gerrit-Change-Id: I4c07e4bc5f3980f7319c8495431d3106cf93dec6 Gerrit-Change-Number: 1227827 Gerrit-PatchSet: 1 Gerrit-Owner: Suhas Athani <Suhas.Athani@ibm.com>