bugzilla-daemon at defect.opensolaris.org
2008-May-22 03:37 UTC
[Bug 2013] New: ''zfs create -o keyscope=dataset ..'' fails - permission denied
http://defect.opensolaris.org/bz/show_bug.cgi?id=2013
Summary: ''zfs create -o keyscope=dataset ..'' fails
- permission
denied
Classification: Development
Product: zfs-crypto
Version: unspecified
Platform: Other
OS/Version: Solaris
Status: NEW
Severity: major
Priority: P2
Component: other
AssignedTo: darrenm at opensolaris.org
ReportedBy: hua.tang at sun.com
QAContact: hua.tang at sun.com
CC: zfs-crypto-discuss at opensolaris.org
Estimated Hours: 0.0
# zpool create tank /export/testfile
# zfs create tank/fs
# zfs create -o encryption=on -o keysource=passphrase,prompt -o
keyscope=dataset tank/fs/fs_2
Enter passphrase for ''tank/fs/fs_2'':
Enter again:
cannot create ''tank/fs/fs_2'': permission denied
#
It happens with all kinds of keysources.
--
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
bugzilla-daemon at defect.opensolaris.org
2008-May-22 13:48 UTC
[Bug 2013] ''zfs create -o keyscope=dataset ..'' fails - permission denied
http://defect.opensolaris.org/bz/show_bug.cgi?id=2013
Darren J Moffat <darrenm at opensolaris.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |CLOSED
Resolution| |INVALID
--- Comment #1 from Darren J Moffat <darrenm at opensolaris.org>
2008-05-22 06:48:41 ---
I can''t reproduce this. I highly suspect this was to do with crypto
framework
issues with AES_CCM availability.braveheart# ./newpool
+ cd /root
+ pool=tank
+ zpool destroy tank
cannot open ''tank'': no such pool
+ rm -f tank.key
+ rm -rf /tank/
+ mkfile 128m /export/tank1
+ mkfile 128m /export/tank2
+ pktool genkey keystore=file keytype=aes keylen=256 outkey=tank.key
+ zpool create -f tank mirror /export/tank1 /export/tank2
braveheart# zfs create tank/fs
braveheart# zfs create -o encryption=on -o keyscope=dataset -o
keysource=passphrase,prompt tank/fs/fs2
Enter passphrase for ''tank/fs/fs2'':
Enter again:
braveheart# zfs list
NAME USED AVAIL REFER MOUNTPOINT
tank 164K 90.8M 19K /tank
tank/fs 36K 90.8M 18K /tank/fs
tank/fs/fs2 18K 90.8M 18K /tank/fs/fs2
braveheart# df -hl | grep tank
tank 91M 19K 91M 1% /tank
tank/fs 91M 18K 91M 1% /tank/fs
tank/fs/fs2 91M 18K 91M 1% /tank/fs/fs2
braveheart# uname -a
SunOS braveheart 5.11 zfs-crypto-gate-2008-05-22-11:27 i86pc i386 i86pc
braveheart#
--
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.