From owner-freebsd-fs@FreeBSD.ORG Mon Nov 17 11:57:33 2008 Return-Path: Delivered-To: freebsd-fs@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C1FA7106564A; Mon, 17 Nov 2008 11:57:33 +0000 (UTC) (envelope-from avg@icyb.net.ua) Received: from citadel.icyb.net.ua (citadel.icyb.net.ua [212.40.38.140]) by mx1.freebsd.org (Postfix) with ESMTP id B57078FC16; Mon, 17 Nov 2008 11:57:32 +0000 (UTC) (envelope-from avg@icyb.net.ua) Received: from odyssey.starpoint.kiev.ua (alpha-e.starpoint.kiev.ua [212.40.38.101]) by citadel.icyb.net.ua (8.8.8p3/ICyb-2.3exp) with ESMTP id NAA17587; Mon, 17 Nov 2008 13:57:29 +0200 (EET) (envelope-from avg@icyb.net.ua) Message-ID: <49215C28.1020405@icyb.net.ua> Date: Mon, 17 Nov 2008 13:57:28 +0200 From: Andriy Gapon User-Agent: Thunderbird 2.0.0.17 (X11/20081106) MIME-Version: 1.0 To: Pawel Jakub Dawidek References: <491D710A.9090308@icyb.net.ua> <491D8621.40101@icyb.net.ua> <20081117043042.GA2101@garage.freebsd.pl> In-Reply-To: <20081117043042.GA2101@garage.freebsd.pl> Content-Type: text/plain; charset=KOI8-U Content-Transfer-Encoding: 7bit Cc: freebsd-fs@FreeBSD.org Subject: Re: zfs snapdir: from hidden to visible and back again X-BeenThere: freebsd-fs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Filesystems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Nov 2008 11:57:33 -0000 on 17/11/2008 06:31 Pawel Jakub Dawidek said the following: > On Fri, Nov 14, 2008 at 04:07:29PM +0200, Andriy Gapon wrote: >> on 14/11/2008 14:37 Andriy Gapon said the following: >>> Also, even with snapdir=hidden, I still can list snapshots (their >>> contents) if I ls full path with .zfs in it. >>> Is this right? >> And it seems that any snapshot accessed in this way gets automatically >> added to mounts. This doesn't seem to be reasonable. >> >> For example, periodic security script would report suid binaries found >> in these snapshots, etc. > > Everything you described is expected behaviour. > I see. I guess there is no way to access something without mounting and no way to auto-unmount after use. Thanks. -- Andriy Gapon