On Tue, Aug 27, 2024 at 7:34 PM Amir Goldstein <amir73il@xxxxxxxxx> wrote: > > The most annoying part of the current functionality is the > > CAP_SYS_ADMIN restriction; I am not sure everyone is prepared to run > > their file systems as root. Could the ioctl check that the file was > > opened as O_RDWR, and stop checking for root? > > > > Donno. It's a challenge. Will need to think about it. It looks like `struct file` has an owner field. Could the passthrough always be allowed if the owner of the FUSE process is the owner of the backing file? In most of my FUSE filesystems, the backing file is typically created by the FUSE process (eg. by downloading something from the internet). -- Han-Wen Nienhuys - hanwenn@xxxxxxxxx - http://www.xs4all.nl/~hanwen
