Re: [OmniOS-discuss] issue 8984 (fix for 6764 breaks ACL inheritance)

2018-03-18 Thread David Ledger
On 18 Mar 2018, at 13:58, Andries Annema wrote: Thanks Andy, for pointing that out. So it seems to be a "feature" of how rsync handles permissions. I've been fiddling around with those rsync options, but I couldn't get it right. That's not a biggy though, I'll take an other approach: use

Re: [OmniOS-discuss] issue 8984 (fix for 6764 breaks ACL inheritance)

2018-03-18 Thread Andries Annema
Thanks Andy, for pointing that out. So it seems to be a "feature" of how rsync handles permissions. I've been fiddling around with those rsync options, but I couldn't get it right. That's not a biggy though, I'll take an other approach: use rsync to copy the data over and afterwards correct the

Re: [OmniOS-discuss] issue 8984 (fix for 6764 breaks ACL inheritance)

2018-03-09 Thread Andy Fiddaman
On Thu, 8 Mar 2018, Paul B. Henson wrote: ; > From: Andries Annema ; > Sent: Thursday, March 8, 2018 8:06 AM ; > ; > But the issue seems unresolved when: ; > ; > - using rsync to copy stuff over from one dataset to another. ; ; I don't think rsync understands ZFS ACLs? So it is most likely

Re: [OmniOS-discuss] issue 8984 (fix for 6764 breaks ACL inheritance)

2018-03-08 Thread Paul B. Henson
> From: Andries Annema > Sent: Thursday, March 8, 2018 8:06 AM > > But the issue seems unresolved when: > > - using rsync to copy stuff over from one dataset to another. I don't think rsync understands ZFS ACLs? So it is most likely trying to duplicate the mode bits while copying, using chmod...

Re: [OmniOS-discuss] issue 8984 (fix for 6764 breaks ACL inheritance)

2018-03-08 Thread Andries Annema
Hi Andy (and list), Following the release of r151022ap, I updated my testing VM and poked around a bit trying to verify whether the 8984 issue is now indeed properly resolved. Well, on the one hand it is, but on the other... I'm getting a bit confused whether it is, or if there is something

Re: [OmniOS-discuss] issue 8984 (fix for 6764 breaks ACL inheritance)

2018-02-20 Thread Andries Annema
Paul, Thanks for the insight! And thumbs up for the team working on this bug already. Cheers, On 2018-02-18 21:47, Paul B. Henson wrote: On Sun, Feb 18, 2018 at 05:20:43PM +0100, Andries Annema wrote: Playing around with r151022, I may have bumped into the same issue here. The ACE's that I

Re: [OmniOS-discuss] issue 8984 (fix for 6764 breaks ACL inheritance)

2018-02-20 Thread Andries Annema
Hi Andy, Good news help is on the way! I tried your suggestion below to install the patch, but I'm greeted with a long long list of "pkg update" rejections for at least one lipkg zone, like so: root@vm01omniosce~# pkg update -rv --be-name=omnios-patch8984     Packages to update:

Re: [OmniOS-discuss] issue 8984 (fix for 6764 breaks ACL inheritance)

2018-02-18 Thread Paul B. Henson
On Sun, Feb 18, 2018 at 05:20:43PM +0100, Andries Annema wrote: > Playing around with r151022, I may have bumped into the same issue here. > The ACE's that I set on the parent directory are nicely inherited, but > on top of that, another ACE for owner@, group@ and everyone@ is added. Yup, that

Re: [OmniOS-discuss] issue 8984 (fix for 6764 breaks ACL inheritance)

2018-02-18 Thread Andy Fiddaman
On Sun, 18 Feb 2018, Andries Annema wrote: ; Playing around with r151022, I may have bumped into the same issue here. ; The ACE's that I set on the parent directory are nicely inherited, but ; on top of that, another ACE for owner@, group@ and everyone@ is added. Hi, This does sound like the

Re: [OmniOS-discuss] issue 8984 (fix for 6764 breaks ACL inheritance)

2018-02-18 Thread Andries Annema
Playing around with r151022, I may have bumped into the same issue here. The ACE's that I set on the parent directory are nicely inherited, but on top of that, another ACE for owner@, group@ and everyone@ is added. Another weird thing I noticed is that these unwanted ACE's are *only* added

[OmniOS-discuss] issue 8984 (fix for 6764 breaks ACL inheritance)

2018-02-16 Thread Paul B. Henson
After we upgraded to the latest version of OmniOSce, switching from the last OmniTI LTS release, we ran into a fairly big problem with ACL inheritance, which results in unexpectedly insecure file permissions :(. After a short discussion on the ZFS developer mailing list: