On Sat, Mar 11, 2017 at 02:54:45PM +0000, Sam Bull wrote:
> I'm getting an error when trying to send a subvolume. I only seem to be
> able to do this as root. The subvolume was created by the user account,
> and not root. Could anybody shed some light on why this is failing? Is
> there a way to get it working?
> 
> $ btrfs send /var/spool/backups/hacking/2017-03-10 > something
> ERROR: cannot open '/': Operation not permitted

The send operation for non-root would need a full evaluation whether it
does not cross the permissions/security boundaries.

> Also appears I cannot even use btrfs subvolume show:
> 
> $ btrfs subvolume show /var/spool/backups/hacking/2017-03-10
> ERROR: can't perform the search - Operation not permitted
> ERROR: can't find 'var/spool/backups/hacking/2017-03-10'

The reason here is that the TREE_SEACH ioctl is used, that gives full
access to the internal structures and therefore is root-only. Many
'btrfs' subcommands utilize the flexibility of the ioctl as we don't
have tons of specialized ioctls, but this comes at some cost.
--
To unsubscribe from this list: send the line "unsubscribe linux-btrfs" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to