summaryrefslogtreecommitdiff
path: root/usr/src/uts/common/fs/zfs/zfs_acl.c
AgeCommit message (Collapse)AuthorFilesLines
2019-08-2011479 zfs project supportNasf-Fan1-5/+7
Portions contributed by: Jerry Jelinek <jerry.jelinek@joyent.com> Portions contributed by: Jinshan Xiong <jinshan.xiong@intel.com> Portions contributed by: Suman Chakravartula <schakrava@gmail.com> Portions contributed by: jxiong <jinshan.xiong@gmail.com> Reviewed by: Brian Behlendorf <behlendorf1@llnl.gov> Reviewed by: Andreas Dilger <andreas.dilger@intel.com> Reviewed by Ned Bass <bass6@llnl.gov> Reviewed by: Matthew Ahrens <mahrens@delphix.com> Reviewed by: C Fraire <cfraire@me.com> Reviewed by: Kody Kantor <kody.kantor@joyent.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2019-05-2910991 Allow user ACE in ACL to match SID in token extra SIDsGordon Ross1-24/+13
Reviewed by: Roman Strashkin <roman.strashkin@nexenta.com> Reviewed by: Sanjay Nadkarni <sanjay.nadkarni@nexenta.com> Reviewed by: Evan Layton <evan.layton@nexenta.com> Reviewed by: Rick McNeal <rick.mcneal@nexenta.com> Reviewed by: Joyce McIntosh <joyce.mcintosh@nexenta.com> Reviewed by: Garrett D'Amore <garrett@damore.org> Reviewed by: Gergő Doma <domag02@gmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2019-02-138423 Implement large_dnode pool featureToomas Soome1-9/+9
8199 multi-threaded dmu_object_alloc() 7432 Large dnode pool feature Reviewed by: Jerry Jelinek <jerry.jelinek@joyent.com> Reviewed by: Jason King <jason.king@joyent.com> Approved by: Dan McDonald <danmcd@joyent.com>
2018-03-109213 zfs: sytem typoToomas Soome1-1/+1
Reviewed by: C Fraire <cfraire@me.com> Reviewed by: Andy Fiddaman <omnios@citrus-it.co.uk> Approved by: Joshua M. Clulow <josh@sysmgr.org>
2018-03-068984 fix for 6764 breaks ACL inheritanceDominik Hassler1-11/+29
Reviewed by: Sam Zaydel <szaydel@racktopsystems.com> Reviewed by: Paul B. Henson <henson@acm.org> Reviewed by: Prakash Surya <prakash.surya@delphix.com> Approved by: Matthew Ahrens <mahrens@delphix.com>
2018-02-068966 Source file zfs_acl.c, function zfs_aclset_common contains a use after ↵WHR1-1/+1
end of the lifetime of a local variable Reviewed by: Matt Ahrens <mahrens@delphix.com> Reviewed by: Andriy Gapon <avg@FreeBSD.org> Approved by: Richard Lowe <richlowe@richlowe.net>
2017-06-138311 ZFS_READONLY is a little too strictGordon Ross1-6/+22
Reviewed by: Sanjay Nadkarni <sanjay.nadkarni@nexenta.com> Reviewed by: Yuri Pankov <yuri.pankov@nexenta.com> Reviewed by: Andrew Stormont <andyjstormont@gmail.com> Reviewed by: Matt Ahrens <mahrens@delphix.com> Reviewed by: John Kennedy <john.kennedy@delphix.com> Approved by: Prakash Surya <prakash.surya@delphix.com>
2016-04-206765 zfs_zaccess_delete() comments do not accurately reflect delete ↵Kevin Crowe1-22/+21
permissions for ACLs Reviewed by: Gordon Ross <gwr@nexenta.com> Reviewed by: Yuri Pankov <yuri.pankov@nexenta.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2016-04-206764 zfs issues with inheritance flags during chmod(2) with aclmode=passthroughAlbert Lee1-84/+78
Reviewed by: Gordon Ross <gwr@nexenta.com> Reviewed by: Yuri Pankov <yuri.pankov@nexenta.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2016-04-206763 aclinherit=restricted masks inherited permissions by group perms ↵Albert Lee1-6/+5
(groupmask) Reviewed by: Gordon Ross <gwr@nexenta.com> Reviewed by: Yuri Pankov <yuri.pankov@nexenta.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2016-04-206762 POSIX write should imply DELETE_CHILD on directories - and some ↵Kevin Crowe1-81/+148
additional considerations Reviewed by: Gordon Ross <gwr@nexenta.com> Reviewed by: Yuri Pankov <yuri.pankov@nexenta.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2013-06-113742 zfs comments need cleaner, more consistent styleWill Andrews1-4/+5
Reviewed by: Matthew Ahrens <mahrens@delphix.com> Reviewed by: George Wilson <george.wilson@delphix.com> Reviewed by: Eric Schrock <eric.schrock@delphix.com> Approved by: Christopher Siden <christopher.siden@delphix.com>
2013-03-083598 want to dtrace when errors are generated in zfsMatthew Ahrens1-18/+19
Reviewed by: Dan Kimmel <dan.kimmel@delphix.com> Reviewed by: Adam Leventhal <ahl@delphix.com> Reviewed by: Christopher Siden <christopher.siden@delphix.com> Approved by: Garrett D'Amore <garrett@damore.org>
2011-05-14742 Resurrect the ZFS "aclmode" propertyAlbert Lee1-104/+51
664 Umask masking "deny" ACL entries. 279 Bug in the new ACL (post-PSARC/2010/029) semantics Reviewed by: Aram Hăvărneanu <aram@nexenta.com> Reviewed by: Gordon Ross <gwr@nexenta.com> Reviewed by: Robert Gordon <rbg@openrbg.com> Reviewed by: Mark.Maybee@oracle.com Approved by: Garrett D'Amore <garrett@nexenta.com>
2010-08-126975482 assertion failed: error == 0 (0x2 == 0x0), file: ↵Mark Shellenbaum1-2/+2
../../common/fs/zfs/zfs_vnops.c, line: 1630 6975131 zfs_remove leaks xattr vnode holds, which can lead to zone halt problem 6975190 memory leak after zfs stress testing
2010-08-116971929 Unable to add/remove ACE after doing idmap flush -aMark Shellenbaum1-61/+29
2010-08-096973827 ACL upgrade from zpl version 2 -> 4 don't grab all the necessary tx ↵Mark Shellenbaum1-1/+3
holds.
2010-06-146957974 assertion failed: 0 == sa_lookup(zp->z_sa_hdl, ↵Mark Shellenbaum1-32/+85
SA_ZPL_ZNODE_ACL(zp->z_zfsvfs) 6960907 zfs_rezget() has uninitialized z_mode variable
2010-05-066947609 not inheriting inherit_only directories correctlyMark Shellenbaum1-2/+5
2010-04-28PSARC 2009/377 In-kernel pfexec implementation.Casper H.S. Dik1-28/+47
PSARC 2009/378 Basic File Privileges PSARC 2010/072 RBAC update: user attrs from profiles 4912090 pfzsh(1) should exist 4912093 pfbash(1) should exist 4912096 pftcsh(1) should exist 6440298 Expand the basic privilege set in order to restrict file access 6859862 Move pfexec into the kernel 6919171 cred_t sidesteps kmem_debug; we need to be able to detect bad hold/free when they occur 6923721 The new SYS_SMB privilege is not backward compatible 6937562 autofs doesn't remove its door when the zone shuts down 6937727 Zones stuck on deathrow; netstack_zone keeps a credential reference to the zone 6940159 Implement PSARC 2010/072
2010-04-226945935 potential mutex problem in zfs_zaccess_aces_check()Mark Shellenbaum1-1/+3
2010-04-14PSARC/2010/029 Improved ACL interoperabilityMark Shellenbaum1-442/+151
6923083 ZFS/NFS/SMB ACL interoperability changes
2010-03-22PSARC/2010/009 Modified ZFS passthrough-x ACL inheritanceMark Shellenbaum1-4/+4
6935418 passthrough-x should apply to all ACEs
2010-03-166716117 ZFS needs native system attribute infrastructureMark Shellenbaum1-246/+366
6516171 zpl symlinks should have their own object type
2010-01-226901694 Panic attempting to write zfs credentialsJohn Harres1-1/+16
6912726 panic in zfs_log_create() due to NULL z_fuidp not populated in zfs_acl_ids_create()
2009-12-046906110 bad trap panic in zil_replay_log_recordMark Shellenbaum1-1/+1
6906946 zfs replay isn't handling uid/gid correctly
2009-08-126870564 panic in zfs_getsecattrMark Shellenbaum1-4/+11
2009-07-316865875 zfs sometimes incorrectly giving search access to a dirTim Haley1-0/+6
2009-07-206857433 memory leaks found at: zfs_acl_alloc/zfs_acl_node_allocTim Haley1-12/+22
6860318 truncate() on zfsroot succeeds when file has a component of its path set without access permission
2009-06-276775100 stat() performance on files on zfs should be improvedTim Haley1-12/+99
6827779 rrwlock is overly protective of its counters
2009-06-156848431 zfs with rstchown=0 or file_chown_self privilege allows user to ↵Mark Shellenbaum1-4/+3
"take" ownership
2009-05-28PSARC 2009/246 ZFS support for Access Based EnumerationTim Haley1-52/+135
6802734 Support for Access Based Enumeration 6826760 A test driver for some ZFS features would be beneficial 6844861 inconsistent xattr readdir behavior with too-small buffer
2009-04-296801810 Commit of aligned streaming rewrites to ZIL device causes unwanted ↵Neil Perrin1-1/+1
disk reads
2009-04-18PSARC/2009/204 ZFS user/group quotas & space accountingMatthew Ahrens1-12/+8
6501037 want user/group quotas on ZFS 6830813 zfs list -t all fails assertion 6827260 assertion failed in arc_read(): hdr == pbuf->b_hdr 6815592 panic: No such hold X on refcount Y from zfs_znode_move 6759986 zfs list shows temporary %clone when doing online zfs recv
2009-03-266790064 zfs needs to determine uid and gid earlier in create processMark Shellenbaum1-127/+114
2009-03-026809529 dirtying snapshot! rears its head againMark Shellenbaum1-5/+7
2008-11-256765294 Refactor replayNeil Perrin1-3/+3
2008-11-10PSARC/2008/659 New ZFS "passthrough-x" ACL inheritance rulesMark Shellenbaum1-90/+102
6765166 Need to provide mechanism to optionally inherit ACE_EXECUTE
2008-09-176744510 Should not allow to rename a file/folder when a user does not have ↵Mark Shellenbaum1-6/+6
permission
2008-09-116746456 ZFS doesn't inherit old ACLs correctly on upgraded file systemMark Shellenbaum1-19/+52
2008-08-146736457 dmu_tx_dirty_buf+297 panic while Win2003 is copying i386 folder from ↵Mark Shellenbaum1-11/+12
win2003 CD-ROM to Nevada
2008-08-04PSARC 2008/486 Intent log replay failure handlingperrin1-0/+3
6707530 log device failure needs some work
2008-07-226723181 delete deny permissions brokenmarks1-31/+28
2008-07-08PSARC/2008/342 Further SID supportmarks1-13/+6
6677411 chmod when faced with deleting more than one acl in one go will only remove the first ACL 6677801 *chmod* Could be more efficient when deleting ACLs 6682126 *chmod* reports invalid user when it means invalid group 6682138 *chmod* Recursive setting of inherit ACLs reports errors for all files. 6682943 Request for aliases to simplify setting ACL permissions 6699852 ZFS should allow storing inheritance flags in file ACLs 6703748 ZFS allows deletes on a readonly file system 6710731 chown(1)/chgrp(1) SID support 6710735 tar/cpio ACL/SID support 6714392 want more SID support
2008-04-09PSARC/2008/231 New ZFS "passthrough" ACL inheritance rulesmarks1-72/+84
6538405 ZFS needs mechanism to bypass file creation mode
2008-03-216674548 zfs_delete_final_check calls secpolicy_vnode_access on wrong vnodemarks1-36/+39
2008-02-216664536 zfs O_RDWR access check more stringent than tmpfs or ufsmarks1-14/+20
2008-02-016650192 zfs ACL/fuid code could use some minor cleanupmarks1-48/+50
6650223 zdb znode output should include uid/gid and possible SID information 6657644 zfs_fuid_init() panic
2008-01-146603908 can't change mode if FS/dir is out of quotamarks1-25/+26
2008-01-046552639 Each zone should have it's own idmapdjp1512161-22/+23