Fw: zfs - no access to a Mac OS X zfs pool without root privileges

[Jeremy Chadwick]

On Fri, Aug 08, 2008 at 01:51:12PM +0200, Gary Jennejohn wrote:
> Oops, forgot to include the ML.
> 
> Begin forwarded message:
> 
> Date: Fri, 8 Aug 2008 13:49:38 +0200
> From: Gary Jennejohn <gary.jennejohn at freenet.de>
> To: Jeremy Chadwick <koitsu at FreeBSD.org>
> Subject: Re: zfs - no access to a Mac OS X zfs pool without root privileges
> 
> 
> On Fri, 8 Aug 2008 04:26:13 -0700
> Jeremy Chadwick <koitsu at FreeBSD.org> wrote:
> 
> > On Fri, Aug 08, 2008 at 01:01:27PM +0200, Gary Jennejohn wrote:
> [BIG snip]
> > > mirpool  aclinherit       restricted             default <==
> > > mirpool  canmount         on                     default
> > > mirpool  shareiscsi       off                    default
> > > mirpool  xattr            off                    temporary
> > > mirpool  copies           1                      default
> > > mirpool  version          1                      -
> > > mirpool  utf8only         off                    -
> > > mirpool  normalization    none                   -
> > > mirpool  casesensitivity  sensitive              -
> > > mirpool  vscan            off                    default
> > > mirpool  nbmand           off                    default
> > > mirpool  sharesmb         off                    default
> > > mirpool  refquota         none                   default
> > > mirpool  refreservation   none                   default
> > > 
> > > root:peedub:~:bash:2> zfs set aclinherit=secure mirpool
> > > property 'aclinherit' not supported on FreeBSD: permission denied
> > > 
> > > Apparently it's not really used.
> > 
> > You need to remember the individual is using the patch on CURRENT
> > provided by pjd, which bring ZFS up to the latest OpenSolaris version.
> > It's possible on that version it *is* implemented; I do not know.
> > 
> > Based on the manpage description for aclinherit, that option could
> > definitely cause what he's seeing.
> > 
> 
> I _am_ using the patched version from pjd at .
> 
> garyj:peedub:freebsd:-bash:11> grep ZFS /var/run/dmesg.boot
> WARNING: ZFS is considered to be an experimental feature in FreeBSD.
> ZFS filesystem version 11
> ZFS storage pool version 11

Then I don't have an explanation.  The only thing different I see about
the filesystem is that aclinherit option is "restricted" (and the value
of that option, I believe, could cause what you're seeing), while on
ZFS fs/pool version 6, the default appears to be "secure".  Possibly
they're the same, just renamed?

-- 
| Jeremy Chadwick                                jdc at parodius.com |
| Parodius Networking                       http://www.parodius.com/ |
| UNIX Systems Administrator                  Mountain View, CA, USA |
| Making life hard for others since 1977.              PGP: 4BD6C0CB |