Revert "block: grant IOPRIO_CLASS_RT to CAP_SYS_NICE"

This reverts commit 9d3a39a5f1 as that
commit causes a bunch of SELinux errors.

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: I73dc15c4ecddcf1950ca7fca2cc107be27da8f3f
This commit is contained in:
Greg Kroah-Hartman
2020-10-24 17:27:45 +02:00
parent c62fe038fe
commit 35cda5af62
2 changed files with 1 additions and 3 deletions

View File

@@ -69,7 +69,7 @@ int ioprio_check_cap(int ioprio)
switch (class) {
case IOPRIO_CLASS_RT:
if (!capable(CAP_SYS_NICE) && !capable(CAP_SYS_ADMIN))
if (!capable(CAP_SYS_ADMIN))
return -EPERM;
fallthrough;
/* rt has prio field too */

View File

@@ -288,8 +288,6 @@ struct vfs_ns_cap_data {
processes and setting the scheduling algorithm used by another
process. */
/* Allow setting cpu affinity on other processes */
/* Allow setting realtime ioprio class */
/* Allow setting ioprio class on other processes */
#define CAP_SYS_NICE 23