Ric Aleshire wrote: > Tim Haley wrote: > >> Will you allow label setting to be delegated (i.e, 'zfs allow')? All >> other properties support this. > > I don't have a final answer for this now. My initial reaction is "no > delegation", but I want to verify if there are indeed > special security considerations based on the MAC (mandatory access) > nature of this property. This differs from > DAC properties which are discretionary and can be modified by general > users. I'll get back on this one. > I don't see a problem with delegation as long as the same restrictions apply to the delegate as to the dataset owner.
--Glenn
