imrcpan/erofs-linux
1
0 Fork 0
mirror of git://git.kernel.org/pub/scm/linux/kernel/git/xiang/erofs.git synced 2026-10-31 06:14:39 +01:00
Code Issues Packages Projects Releases Wiki Activity

block: grant IOPRIO_CLASS_RT to CAP_SYS_NICE

Browse Source 
CAP_SYS_ADMIN is too broad, and ionice fits into CAP_SYS_NICE's grouping.

Retain CAP_SYS_ADMIN permission for backwards compatibility.

Signed-off-by: Khazhismel Kumykov <[email protected]>
Reviewed-by: Bart Van Assche <[email protected]>
Acked-by: Serge Hallyn <[email protected]>
Signed-off-by: Jens Axboe <[email protected]>
This commit is contained in:
Khazhismel Kumykov authored and Jens Axboe committed 2020-09-01 19:38:33 -06:00
1 parent a7863b3423
commit 9d3a39a5f1
2 files changed
+3 -1
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

block/ioprio.c
+1 -1
View File
@@ -69,7 +69,7 @@ int ioprio_check_cap(int ioprio)
switch (class) {
case IOPRIO_CLASS_RT:
if (!capable(CAP_SYS_ADMIN))
if (!capable(CAP_SYS_NICE) && !capable(CAP_SYS_ADMIN))
return -EPERM;
fallthrough;
/* rt has prio field too */
include/uapi/linux/capability.h
+2
View File
@@ -288,6 +288,8 @@ struct vfs_ns_cap_data {
processes and setting the scheduling algorithm used by another
process. */
/* Allow setting cpu affinity on other processes */
/* Allow setting realtime ioprio class */
/* Allow setting ioprio class on other processes */
#define CAP_SYS_NICE 23