ZFS snapdir readability (Crosspost)

Jan Behrens jbe-mlist at magnetkern.de
Sat Nov 9 13:50:43 UTC 2019


On Fri, 8 Nov 2019 15:19:07 +0200
Andriy Gapon <avg at FreeBSD.org> wrote:

> On 08/11/2019 13:52, Jan Behrens wrote:
> > [...] I believe adding an option to restrict
> > readability of .zfs/snapdir to the owner of the root would
> > significantly improve security, [...]
> 
> I would not object to having something like snapdirmode property.
> I think that it's reasonable.
> 
> -- 
> Andriy Gapon

Is it difficult to implement that? I assume it would require a new zfs
pool feature to create such a new property?

Regards,
Jan


More information about the freebsd-fs mailing list