zfs crypto discuss - Jun 2008 - [Bug 2113] New: delegation_003: a non-root user can''t do ''zfs key -l'' with keyuse,mount delegated

http://defect.opensolaris.org/bz/show_bug.cgi?id=2113

           Summary: delegation_003: a non-root user can''t do
''zfs key -l''
                    with keyuse,mount delegated
    Classification: Development
           Product: zfs-crypto
           Version: unspecified
          Platform: Other
        OS/Version: Solaris
            Status: NEW
          Severity: normal
          Priority: P3
         Component: other
        AssignedTo: darrenm at opensolaris.org
        ReportedBy: hua.tang at sun.com
         QAContact: hua.tang at sun.com
                CC: zfs-crypto-discuss at opensolaris.org
   Estimated Hours: 0.0


Msg| 20923 | 1: Testing with keyuse,mount delegated, a non-root user can do
''zf
s key -u''
Msg| 20923 |
stdout| 20923| /usr/sbin/zpool create -f pool_20923 /export/home/vdev_file_1
stdout| 20923| /usr/sbin/zfs create -o encryption=on -o keyscope=dataset
     -o keysource=hex,file:///export/home/zfscrypto-tests/proto/suites/security
/zfs-crypto/etc/hex_key_file pool_20923/fs
stdout| 20923| cp /export/home/zfscrypto-tests/proto/suites/security/zfs-crypto
/etc/file1.txt /pool_20923/fs
stdout| 20923| /usr/sbin/zfs allow zfsc keyuse,mount pool_20923/fs
stdout| 20923| /bin/su zfsc -c "/usr/sbin/zfs key -u pool_20923/fs"
Msg| 20923 | [ - Result ]
Msg| 20923 | RESULT:  PASS
Msg| 20923 |
Msg| 20923 | [ - Progress ]
Msg| 20923 | 2: Testing with keyuse,mount delegated, a non-root user can do
''zf
s key -l''
Msg| 20923 |
stdout| 20923| /bin/su zfsc -c "/usr/sbin/zfs key -l pool_20923/fs"
stderr| cannot mount ''pool_20923/fs'': Insufficient privileges
stderr| Key error in ''pool_20923/fs'': crypto key failure
stdout| 20923| Expected return value: 0
stdout| 20923| Actual return value: 1
Msg| 20923 | [ - Result ]
Msg| 20923 | RESULT:  FAIL

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=2113





--- Comment #1 from Darren J Moffat <darrenm at opensolaris.org> 
2008-06-02 02:28:23 ---
The user needs to own the mountpoint.

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=2113


Darren J Moffat <darrenm at opensolaris.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
              Alias|                            |BUGSTER:6709577
             Status|NEW                         |CLOSED
         Resolution|                            |TRACKEDINBUGSTER




--- Comment #2 from Darren J Moffat <darrenm at opensolaris.org> 
2008-06-02 07:50:08 ---
This is a test suite bug see Bugster: 6709577

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=2113


David Comay <David.Comay at Sun.COM> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Status Whiteboard|                            |BugsterCR=6709577
                 CC|                            |David.Comay at Sun.COM




-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.