git: a5b392de86f9 - stable/14 - libbe: avoid copying encryption-related props
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 17 Apr 2025 01:05:54 UTC
The branch stable/14 has been updated by kevans: URL: https://cgit.FreeBSD.org/src/commit/?id=a5b392de86f9e9949072ab4b7caf1439aa00a571 commit a5b392de86f9e9949072ab4b7caf1439aa00a571 Author: Kyle Evans <kevans@FreeBSD.org> AuthorDate: 2025-02-26 22:23:24 +0000 Commit: Kyle Evans <kevans@FreeBSD.org> CommitDate: 2025-04-17 01:01:18 +0000 libbe: avoid copying encryption-related props libzfs insists that these be cloned from the origin, so avoid making a deep copy of them ourselves to unbreak creating a new BE from a BE with encrypted components -- in today's environment, without a loader that does encryption, this means a deep BE setup where something underneath the BE (e.g., home directories) are encrypted. Reported and tested by: arrowd Reviewed by: allanjude (cherry picked from commit 181549c37f1913f5ca292d8515a6e5e0068a9fe7) --- lib/libbe/be.c | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/lib/libbe/be.c b/lib/libbe/be.c index 38e5e44abb53..a9838f2200bf 100644 --- a/lib/libbe/be.c +++ b/lib/libbe/be.c @@ -670,8 +670,20 @@ be_deep_clone_prop(int prop, void *cb) dccb = cb; /* Skip some properties we don't want to touch */ - if (prop == ZFS_PROP_CANMOUNT) + switch (prop) { + /* + * libzfs insists on these being naturally inherited in the + * cloning process. + */ + case ZFS_PROP_KEYFORMAT: + case ZFS_PROP_KEYLOCATION: + case ZFS_PROP_ENCRYPTION: + case ZFS_PROP_PBKDF2_ITERS: + + /* FALLTHROUGH */ + case ZFS_PROP_CANMOUNT: /* Forced by libbe */ return (ZPROP_CONT); + } /* Don't copy readonly properties */ if (zfs_prop_readonly(prop))