Messages in this thread | | | Date | Tue, 13 Nov 2012 09:38:34 -0800 | From | Tejun Heo <> | Subject | Re: [PATCH v3 2/2] sg_io: introduce unpriv_sgio queue flag |
| |
On Tue, Nov 13, 2012 at 06:25:13PM +0100, Paolo Bonzini wrote: > This queue flag will let unprivileged users send any SG_IO command to the > device, without any filtering. This makes it possible to run a program > where you want to access the full range of SCSI commands, while still > running as confined as possible. With this patch, such a program will > not need the CAP_SYS_RAWIO capability anymore, and will also not be > able to send SCSI commands to a partition (which would affect the full > disk). > > Cc: linux-scsi@vger.kernel.org > Cc: Alan Cox <alan@lxorguk.ukuu.org.uk> > Cc: James Bottomley <James.Bottomley@HansenPartnership.com> > Cc: Jens Axboe <axboe@kernel.dk> > Cc: Ric Wheeler <rwheeler@redhat.com> > Cc: Tejun Heo <tj@kernel.org> > Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Acked-by: Tejun Heo <tj@kernel.org>
Thanks.
-- tejun
| |