scsi: build qemu-pr-helper
Introduce a privileged helper to run persistent reservation commands.
This lets virtual machines send persistent reservations without using
CAP_SYS_RAWIO or out-of-tree patches. The helper uses Unix permissions
and SCM_RIGHTS to restrict access to processes that can access its socket
and prove that they have an open file descriptor for a raw SCSI device.
The next patch will also correct the usage of persistent reservations
with multipath devices.
It would also be possible to support for Linux's IOC_PR_* ioctls in
the future, to support NVMe devices. For now, however, only SCSI is
supported.
Signed-off-by:
Paolo Bonzini <pbonzini@redhat.com>
Showing
- Makefile 3 additions, 1 deletionMakefile
- configure 10 additions, 4 deletionsconfigure
- docs/interop/pr-helper.rst 83 additions, 0 deletionsdocs/interop/pr-helper.rst
- docs/pr-manager.rst 33 additions, 0 deletionsdocs/pr-manager.rst
- scsi/pr-helper.h 41 additions, 0 deletionsscsi/pr-helper.h
- scsi/qemu-pr-helper.c 735 additions, 0 deletionsscsi/qemu-pr-helper.c
Loading
Please register or sign in to comment