On Tue, 2012-06-12 at 18:08 +0200, Paolo Bonzini wrote: > Persistent reservations commands cannot be issued right now without > giving CAP_SYS_RAWIO to the process who wishes to send them. This > is a bit heavy-handed, allow these two commands. Why is this heavy handed? If you remove CAP_SYS_RAWIO, any userspace process can send these, which would allow any user to completely disrupt a SAN by injecting spurious reservations ... that doesn't look to be terribly safe for an operating system running in a data centre. James -- To unsubscribe from this list: send the line "unsubscribe linux-scsi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
