initrd stage: CAP_SYS_RAWIO on /dev/iscsictl fails . help
"Aggarwal, VikasX" <[email protected]> Wed, 26 Oct 2005 11:49:15 -0700
| Newsgroups | gmane.linux.redhat.devel |
|---|---|
| Message-ID | <69F69FD5FD4A9843ACBF7CE9B7830B4A06289185@orsmsx408> |
This is a multi-part message in MIME format.
--===============1736004982==
Content-class: urn:content-classes:message
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_01C5DA5D.F741C0BD"
This is a multi-part message in MIME format.
------_=_NextPart_001_01C5DA5D.F741C0BD
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject : Is CAP_SYS_RAWIO not permitted during the initrd stage in
kernel 2.6.9-22 ? It was permitted in 2.4.20 kernel. =20
Installing and booting from iSCSI disk (worked in
2.4.20 , fails in 2.6.9-22 kernel).=20
=20
=20
Hi,
=20
I am in the initrd stage of boot . Kernel 2.6.9-22 , Red Hat
enterprise linux.
During post-install stage and before the first boot , I modified the
initrd to have my iscsi driver and related daemon in initrd.
The installation was made successfully to an iSCSI disk. Now need to
boot through it. =20
During the initrd stage in first-time-boot , my daemon gets the iSCSI
device name from the remote storage server.=20
=20
" now it wants to pass that information to iscsi-sfnet.ko via IOCTL"
, the ioctl call returns error (-1) which is EPERM, the perror
says-Inappropriate IOCTL". Why that error return from sys_ioctl ?
=20
Is CAP_SYS_RAWIO or some other capability not permitted during the
initrd stage in kernel 2.6.9-22? =20
=20
I have used the same thing in 2.4.20 kernel . works great. I can
install and also boot from the remote iSCSI disk with my modified
initrd in 2.4.20 kernels.
Are the new security features of 2.6 kernel ( security/seclvl.c)
hindering this IOCTL operation during initrd stage?
=20
What is the solution to my problem. Is there a boot-time parameter ?=20
=20
Please advice .
=20
thanks
=20
-Vikas
------_=_NextPart_001_01C5DA5D.F741C0BD
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered medium)">
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:Arial;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal;
font-family:Arial;
color:navy;}
span.EmailStyle19
{mso-style-type:personal;
font-family:Arial;
color:navy;}
span.EmailStyle20
{mso-style-type:personal;
font-family:Arial;
color:navy;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=3DEN-US link=3Dblue vlink=3Dpurple>
<div class=3DSection1>
<p class=3DMsoNormal><b><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial;font-weight:bold'>Subject</span></font></b><font =
size=3D2
face=3DArial><span style=3D'font-size:10.0pt;font-family:Arial'> =
: Is
CAP_SYS_RAWIO not permitted during the initrd stage in =
kernel
2.6.9-22 ? It was permitted in 2.4.20 kernel. =
<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>
&=
nbsp; Installing
and booting from iSCSI disk (worked in 2.4.20 , fails in 2.6.9-22 =
kernel). <o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 color=3Dnavy face=3DArial><span =
style=3D'font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>Hi,<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'> I am in the initrd stage of boot . =
Kernel
2.6.9-22 , Red Hat enterprise linux.<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'> During post-install stage and before the =
first
boot , I modified the initrd to have my iscsi driver and related daemon =
in
initrd.<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'> The installation was made successfully to an =
iSCSI
disk. Now need to boot through it. =
<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'> During the initrd stage in first-time-boot , =
my
daemon gets the iSCSI device name from the remote storage server. =
<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'> “ now it wants to pass that information =
to
iscsi-sfnet.ko via IOCTL” , the ioctl call returns =
error (-1)
which is EPERM, the perror says—Inappropriate IOCTL”. Why =
that
error return from sys_ioctl ?<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'> Is CAP_SYS_RAWIO<font color=3Dnavy><span
style=3D'color:navy'> or some other capability</span></font> not =
permitted
during the initrd stage in kernel 2.6.9-22? =
<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'> <o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>I have used the same thing in 2.4.20 kernel . works
great. I can install and also boot from the remote iSCSI =
disk with
my modified initrd in 2.4.20 kernels.<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>Are the new sec<font color=3Dnavy><span =
style=3D'color:navy'>urity</span></font>
features of 2.6 kernel ( security/seclvl.c) hindering this =
IOCTL
operation <font color=3Dnavy><span style=3D'color:navy'> during =
initrd stage</span></font>?<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>What is the solution to my problem. Is there a =
boot-time
parameter ? <o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>Please advice .<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>thanks<o:p></o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>-Vikas<o:p></o:p></span></font></p>
</div>
</body>
</html>
------_=_NextPart_001_01C5DA5D.F741C0BD--
--===============1736004982==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Redhat-devel-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/redhat-devel-list
--===============1736004982==--