On Fri, 26 Jun 2009, Christoph Hellwig wrote:
> On Thu, Jun 25, 2009 at 02:45:39PM -0700, Sage Weil wrote:
> > This lets an administrator give non-root users access to the btrfs 
> > transaction start/end ioctls via a mount option.
> > 
> > Currently any process using the ioctls must run as root.  That's 
> > appropriate in general, since the ioctls allow let any process to hang fs 
> > commits by holding an open transaction indefinitely.  But on locked down 
> > hosts (i.e. no users), that can be inconvenient because daemons using 
> > transactions have to run as root.
> 
> If the system is locked down there is no problem giving the capability
> to the daemon user.  I'm strong against adding any kind of
> privilegue-evading options to filesystems.

Well, I was hoping for finer granularity that CAP_SYS_ADMIN, but i can 
live with it.  Thanks.

sage
--
To unsubscribe from this list: send the line "unsubscribe linux-btrfs" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to