Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 19 Jun 2011 11:03:39 +0200
From:      Patrick Proniewski <patrick.proniewski@univ-lyon2.fr>
To:        FreeBSD Filesystems <freebsd-fs@freebsd.org>
Subject:   ZFS, noexec and snapshots
Message-ID:  <5084282.22648.1308474239008.JavaMail.root@co3>

next in thread | raw e-mail | index | archive | help

--Apple-Mail-2--545461825
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=iso-8859-1

Hello,

I'm using ZFS with periodic snapshot creation, so users can easily "go =
back in time" in their data by browsing .zfs/snapshot/.
Every ZFS volume is made with noexec, but I've just find out that the =
automount of .zfs/snapshot/* is not made with the noexec option.

Is there something that needs explicit configuration?

# zfs list -t all -r -o mountpoint,name,exec tank/user/foobar
MOUNTPOINT     NAME                        EXEC
/user/foobar  tank/user/foobar             off
-             tank/user/foobar@weekly.3    on
-             tank/user/foobar@weekly.2    on
-             tank/user/foobar@weekly.1    on
-             tank/user/foobar@weekly.0    on

# zfs get all tank/user
NAME       PROPERTY              VALUE                  SOURCE
tank/user  type                  filesystem             -
tank/user  creation              Tue Feb 22 14:17 2011  -
tank/user  used                  26.8G                  -
tank/user  available             93.5G                  -
tank/user  referenced            188K                   -
tank/user  compressratio         1.08x                  -
tank/user  mounted               yes                    -
tank/user  quota                 none                   default
tank/user  reservation           none                   default
tank/user  recordsize            128K                   default
tank/user  mountpoint            /user                  local
tank/user  sharenfs              off                    default
tank/user  checksum              on                     default
tank/user  compression           gzip                   inherited from =
tank
tank/user  atime                 on                     default
tank/user  devices               on                     default
tank/user  exec                  off                    inherited from =
tank
tank/user  setuid                on                     default
tank/user  readonly              off                    default
tank/user  jailed                off                    default
tank/user  snapdir               hidden                 default
tank/user  aclmode               groupmask              default
tank/user  aclinherit            restricted             default
tank/user  canmount              on                     default
tank/user  shareiscsi            off                    default
tank/user  xattr                 off                    temporary
tank/user  copies                1                      default
tank/user  version               4                      -
tank/user  utf8only              off                    -
tank/user  normalization         none                   -
tank/user  casesensitivity       sensitive              -
tank/user  vscan                 off                    default
tank/user  nbmand                off                    default
tank/user  sharesmb              off                    default
tank/user  refquota              none                   default
tank/user  refreservation        none                   default
tank/user  primarycache          all                    default
tank/user  secondarycache        all                    default
tank/user  usedbysnapshots       0                      -
tank/user  usedbydataset         188K                   -
tank/user  usedbychildren        26.8G                  -
tank/user  usedbyrefreservation  0                      -



Patrick PRONIEWSKI
--=20
Administrateur Syst=E8me - DSI - Universit=E9 Lumi=E8re Lyon 2


--Apple-Mail-2--545461825--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5084282.22648.1308474239008.JavaMail.root>