Description: rbd: require global CAP_SYS_ADMIN for mapping and unmapping
References:
 https://twitter.com/grsecurity/status/1304537507560919041
Notes:
 carnil> Fixed as well in 5.8.10.
 bwh> Introduced in 2.6.37 by commit 602adf400201 "rbd: introduce rados
 bwh> block device (rbd), based on libceph".
Bugs:
upstream: released (5.9-rc5) [f44d04e696feaf13d192d942c4f14ad2e117065a]
4.19-upstream-stable: released (4.19.146) [0070f9906d7190d4c69e338403db4abfec81fe7f]
4.9-upstream-stable: released (4.9.237) [774519ed39da09471abe2c02a7f293c380759cc3]
sid: released (5.8.10-1)
4.19-buster-security: released (4.19.146-1)
4.9-stretch-security: released (4.9.240-1)