ZFS, noexec and snapshots
patrick.proniewski at univ-lyon2.fr
Mon Jun 20 19:17:06 UTC 2011
Following Micheal's reply, I realise my english is not as clear as I wish :)
> On 19/06/2011 10:03, Patrick Proniewski wrote:
>> Every ZFS volume is made with noexec, but I've just find out that the automount of .zfs/snapshot/* is not made with the noexec option.
> Just two days ago I was wondering why some of my snapshots are not
> visible in .zfs/snapshot/ after setting snapdir=visible. All of given
> datasets have the noexec property set on.
> I guess that is the answer then.
What I intended to say is:
Automount of .zfs/snapshot/* works, but snapshots are mounted without the option "noexec", despite the fact that the property should be inherited from parents (i think).
Well, if you rely on "noexec" as a security feature, just don't use snapshots, because it looks like snapshots are always mounted with "exec = on"
Administrateur Système - DSI - Université Lumière Lyon 2
More information about the freebsd-fs