Author: mav
Date: Wed Oct 12 05:17:17 2016
New Revision: 307111
URL: https://svnweb.freebsd.org/changeset/base/307111

Log:
  MFC r305221: MFV r302992: 7071 lzc_snapshot does not fill in errlist on ENOENT
  
  illumos/illumos-gate@25f7d993adbfb3452ac4625b3791670746d35ae3
  
https://github.com/illumos/illumos-gate/commit/25f7d993adbfb3452ac4625b379167074
  6d35ae3
  
  https://www.illumos.org/issues/7071
    upstream
    DLPX-40482 lzc_snapshot does not fill in errlist on ENOENT
  
  Reviewed by: Igor Kozhukhov <ikozhuk...@gmail.com>
  Reviewed by: George Wilson <george.wil...@delphix.com>
  Reviewed by: Dan Kimmel <dan.kim...@delphix.com>
  Approved by: Robert Mustacchi <r...@joyent.com>
  Author: Matthew Ahrens <mahr...@delphix.com>

Modified:
  stable/11/sys/cddl/contrib/opensolaris/uts/common/fs/zfs/zfs_ioctl.c
Directory Properties:
  stable/11/   (props changed)

Modified: stable/11/sys/cddl/contrib/opensolaris/uts/common/fs/zfs/zfs_ioctl.c
==============================================================================
--- stable/11/sys/cddl/contrib/opensolaris/uts/common/fs/zfs/zfs_ioctl.c        
Wed Oct 12 05:16:33 2016        (r307110)
+++ stable/11/sys/cddl/contrib/opensolaris/uts/common/fs/zfs/zfs_ioctl.c        
Wed Oct 12 05:17:17 2016        (r307111)
@@ -500,6 +500,14 @@ zfs_secpolicy_write_perms(const char *na
        dsl_dataset_t *ds;
        dsl_pool_t *dp;
 
+       /*
+        * First do a quick check for root in the global zone, which
+        * is allowed to do all write_perms.  This ensures that zfs_ioc_*
+        * will get to handle nonexistent datasets.
+        */
+       if (INGLOBALZONE(curthread) && secpolicy_zfs(cr) == 0)
+               return (0);
+
        error = dsl_pool_hold(name, FTAG, &dp);
        if (error != 0)
                return (error);
_______________________________________________
svn-src-all@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-all
To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"

Reply via email to