Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 8 Aug 2013 13:59:58 +0200 (CEST)
From:      =?ISO-8859-1?Q?Trond_Endrest=F8l?= <Trond.Endrestol@fagskolen.gjovik.no>
To:        George Kontostanos <gkontos.mail@gmail.com>
Cc:        freebsd-stable@freebsd.org
Subject:   Re: ZFS in jails 9.2-RC1 permission denied
Message-ID:  <alpine.BSF.2.00.1308081356490.90799@mail.fig.ol.no>
In-Reply-To: <CA%2BdUSypajBopACJt4HiNOGGYb2RqSfvrL0iP3eA_j%2BRd7hVi%2BA@mail.gmail.com>
References:  <CA%2BdUSyqDY9CQUrTDGNT5xwGjRce=JvAJrJHATxAocvffbz=ewg@mail.gmail.com> <CA%2BdUSypajBopACJt4HiNOGGYb2RqSfvrL0iP3eA_j%2BRd7hVi%2BA@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

--2055831798-494027019-1375963199=:90799
Content-Type: TEXT/PLAIN; charset=ISO-8859-1
Content-Transfer-Encoding: 8BIT

On Thu, 8 Aug 2013 14:53+0300, George Kontostanos wrote:

> On Wed, Aug 7, 2013 at 7:26 PM, George Kontostanos wrote:
> 
> > Hi list,
> >
> > With a 9.1 system and the following:
> >
> > /etc/sysctl.conf:
> >
> > security.jail.mount_allowed=1
> > security.jail.mount_zfs_allowed=1
> > security.jail.enforce_statfs=1
> >
> > zfs set jailed=on Pool
> > zfs jail 1 Pool
> >
> > jexec 1 tcsh
> >
> > jail1# zfs create Pool/test1
> > jail1# zfs list
> >
> > NAME         USED  AVAIL  REFER  MOUNTPOINT
> > Pool         223K  19.6G    31K  /Pool
> > Pool/test1     31K  19.6G    31K  /Pool/test
> >
> > After upgrading to 9.2-RC1 the same operation results in:
> >
> > jail1# zfs create Pool/test2
> >
> > cannot create 'Pool/test2': permission denied
> >
> > What am I missing?
> >
> > Thanks
> >
> > --
> > George Kontostanos
> > ---
> >
> >
> Anybody?

I'm just guessing, but I doubt a jail would be able to create new ZFS 
filesystems outside its own structure, if at all able. A jail would 
however be allowed to (un)mount already existing filesystems within 
its own structure, i.e. Pool/test1.

-- 
+-------------------------------+------------------------------------+
| Vennlig hilsen,               | Best regards,                      |
| Trond Endrestøl,              | Trond Endrestøl,                   |
| IT-ansvarlig,                 | System administrator,              |
| Fagskolen Innlandet,          | Gjøvik Technical College, Norway,  |
| tlf. mob.   952 62 567,       | Cellular...: +47 952 62 567,       |
| sentralbord 61 14 54 00.      | Switchboard: +47 61 14 54 00.      |
+-------------------------------+------------------------------------+
--2055831798-494027019-1375963199=:90799--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.00.1308081356490.90799>