http://defect.opensolaris.org/bz/show_bug.cgi?id=2123
Summary: delegation_003: 'zfs key -u' changes the owner and group
of mountpoint
Classification: Development
Product: zfs-crypto
Version: unspecified
Platform: Other
OS/Version: Solaris
Status: NEW
Severity: normal
Priority: P3
Component: other
AssignedTo: darrenm at opensolaris.org
ReportedBy: hua.tang at sun.com
QAContact: hua.tang at sun.com
CC: zfs-crypto-discuss at opensolaris.org
Estimated Hours: 0.0
stdout| 113710| /usr/sbin/zpool create -f pool_113710 /export/home/vdev_file_1
stdout| 113710| /usr/sbin/zfs create -o encryption=on -o keyscope=dataset -o
keysource=hex,file:///export/home/zfscrypto-tests/proto/su
ites/security/zfs-crypto/etc/hex_key_file pool_113710/fs_1
stdout| 113710| cp
/export/home/zfscrypto-tests/proto/suites/security/zfs-crypto/etc/file1.txt
/pool_113710/fs_1
stdout| 113710| /usr/bin/chown -R zfsc:other /pool_113710/fs_1
stdout| 113710| /usr/sbin/zfs allow zfsc keyuse,mount pool_113710/fs_1
Msg| 113710 | [ - Progress ]
Msg| 113710 | 1: Testing with keyuse,mount delegated,a non-root user can do
'zfs key -u'
Msg| 113710 |
stdout| 113710| /bin/su zfsc -c "/usr/sbin/zfs key -u pool_113710/fs_1"
stdout| 113710| ls -l /pool_113710 | grep fs_1
stdout| 113710| drwxr-xr-x 2 root staff 2 Jun 3 00:21 fs_1
stdout| 113710| Expected owner of /pool_113710/fs_1: zfsc
stdout| 113710| Actual owner: root
stdout| 113710| Expected group of /pool_113710/fs_1: other
stdout| 113710| Acutal group: staff
Msg| 113710 | [ - Result ]
Msg| 113710 | RESULT: FAIL
No matter the unload operation is done by root or delegated user, it changes
the owner and group.
# zpool create test /export/home/testfile
# zfs create -o encryption=on -o keysource=passphrase,prompt -o
keyscope=dataset test/fs
Enter passphrase for 'test/fs':
Enter again:
# chown -R zfsc:other /test
# ls -l /test
total 3
drwxr-xr-x 2 zfsc other 2 Jun 3 00:26 fs
# zfs key -u test/fs
# ls -l /test
total 3
drwxr-xr-x 2 root root 2 Jun 3 00:26 fs
--
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
