Date: Mon, 28 Jul 2008 23:35:00 +0200 From: Pawel Jakub Dawidek <pjd@FreeBSD.org> To: Max Laier <max@love2party.net> Cc: freebsd-fs@freebsd.org, freebsd-current@freebsd.org Subject: Re: allow vs. usermount [Re: ZFS patches.] Message-ID: <20080728213500.GD2740@garage.freebsd.pl> In-Reply-To: <200807282316.37722.max@love2party.net> References: <20080727125413.GG1345@garage.freebsd.pl> <200807282316.37722.max@love2party.net>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --]
On Mon, Jul 28, 2008 at 11:16:37PM +0200, Max Laier wrote:
> On Sunday 27 July 2008 14:54:13 Pawel Jakub Dawidek wrote:
> > If you have any questions, please use mailing lists
> > (freebsd-fs@FreeBSD.org would be the best).
>
> Short exercise:
> | $ whoami
> | mlaier
> | $ zfs list
> | NAME USED AVAIL REFER MOUNTPOINT
> | tank 104K 228G 19K /tank
> | tank/mlaier 18K 228G 18K /tank/mlaier
> | $ zfs allow tank/mlaier
> | -------------------------------------------------------------
> | Local+Descendent permissions on (tank/mlaier)
> | user mlaier create,destroy,mount,snapshot
> | -------------------------------------------------------------
> | $ zfs create tank/mlaier/test
> | cannot mount 'tank/mlaier/test': Insufficient privileges
> | filesystem successfully created, but not mounted
>
> This is obviously due to the check in vfs_mount.c patched line 851:
>
> if (jailed(td->td_ucred) || usermount == 0) {
>
> the question is, should this be tuned to allow for the finer grained zfs
> permissions to take effect or will we force usermount to use zfs allow mount?
Current plan is to document it in the same way ZFS within a jail is
documented in zfs(8). Yes, one needs to set vfs.usermount=1 by hand.
--
Pawel Jakub Dawidek http://www.wheel.pl
pjd@FreeBSD.org http://www.FreeBSD.org
FreeBSD committer Am I Evil? Yes, I Am!
[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (FreeBSD)
iD8DBQFIjjuDForvXbEpPzQRAs21AJsHhp3tQ88mp0UGQr4mxgw7OeJq5wCglQ88
+pVcs/Jo8TGatlJ5dv+/lto=
=cQsh
-----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080728213500.GD2740>