similar to: 293 AES_CBC_PAD keywrap

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/gate Latest revision: 6dded109490e79f82f24b9ba0b3465cb1e6a96e6 Total changesets: 1 Log message: Some of AES_CBC_PAD team missed the last bus home pam_zfs_key module not in this phase fs-local failure if ''zfs mount -a'' fails isn''t our call zoneadm/zfs.c 1866 libzfs_jni needs updated or

Author: Anthony Scarpino <Anthony.Scarpino at Sun.COM> Repository: /hg/zfs-crypto/gate Latest revision: 04f168232992beb7ebec3b25a69735bb3e2ab678 Total changesets: 1 Log message: zpool create now loads/prompts for key. Use random salt instead of guid. Fix 654 Files: update: usr/src/cmd/zfs/zfs_main.c update: usr/src/cmd/zoneadm/zfs.c update: usr/src/cmd/zpool/zpool_main.c update:

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/gate Latest revision: 4c9597e1e4e9b6cbd6c20be06f0cdf9c409d3629 Total changesets: 1 Log message: 885 dataset creation panics if pool keystatus not ''available''. 360 check for key on creation should be in dmu_objset_create_check() 782 zfs keysource=raw fails with keyscope=dataset when file

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/gate Latest revision: 2b29daa2195d09df740d6a13d5677c09974205e5 Total changesets: 1 Log message: last update to AES_CBC_PAD buffer size support broke CCM mode (oops!) Files: update: usr/src/uts/common/crypto/io/aes.c

Author: Anthony Scarpino <Anthony.Scarpino at Sun.COM> Repository: /hg/zfs-crypto/gate Latest revision: 3df1f6b01f2e4234af95267b22947e416a38d4ca Total changesets: 1 Log message: removal of AES_CBC_PAD from kernel Files: update: usr/src/cmd/cmd-crypto/etc/kcf.conf update: usr/src/common/crypto/aes/aes_cbc_crypt.c update: usr/src/common/crypto/aes/aes_cbc_crypt.h update:

Author: Anthony Scarpino <Anthony.Scarpino at Sun.COM> Repository: /hg/zfs-crypto/zfs-crypto-gate Latest revision: 9a17248d7cc3087d39ca752bff184ae5a7831cf6 Total changesets: 1 Log message: passphrase & keymgr load/unload Files: update: usr/src/cmd/zfs/zfs_main.c update: usr/src/cmd/zpool/zpool_main.c update: usr/src/common/zfs/zfs_prop.c update:

Here''s my comments for the preliminary ZFS Crypto review. - Dan Webrev: http://cr.opensolaris.org/~darrenm/zfs-crypto-gate/webrev/ General comments: DEA-1 - SCCS keywords need to be removed DEA-2 - Copyright updated ------------------------------------------------------------------ usr/src/lib/libcryptoutil/common/keyfile.c pkcs11_read_data() This code in pkcs11_read_data() scares

Author: Darren Moffat <Darren.Moffat at Sun.COM> Repository: /hg/zfs-crypto/gate Latest revision: 5eb1c91e55b41ddcb2da4c9ecb74d0fbdfa07833 Total changesets: 1 Log message: 6766659 zfscrypto: assertion failed: iovcnt != 0, file: ../../common/fs/zfs/zio_crypt.c, line: 1890 Files: update: usr/src/uts/common/fs/zfs/zio.c update: usr/src/uts/common/fs/zfs/zvol.c

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/gate Latest revision: 09d6ac706d1fcce8c5e20487fd47af73c4684b98 Total changesets: 1 Log message: 6729887 zio_encrypt_data/zio_decrypt_data should use crypto ctx templates Files: update: usr/src/uts/common/fs/zfs/dmu.c update: usr/src/uts/common/fs/zfs/sys/zio_crypt.h update: usr/src/uts/common/fs/zfs/zio_crypt.c

I have an Ultra 10 client running Sol10 U3 that has a zfs pool set up on the extra space of the internal ide disk. There''s just the one fs and it is shared with the sharenfs property. When this system reboots nfs/server ends up getting disabled and this is the error from the SMF logs: [ Apr 16 08:41:22 Executing start method ("/lib/svc/method/nfs-server start") ] [ Apr 16

Author: lling Repository: /hg/zfs-crypto/gate Revision: 2e20e3394572a9bd1392520e3dc0fff83f57b611 Log message: 6364129 need to unmount any child datasets before doing the rollback 6364126 cannot rollback when a child filesystem is created after a snapshot is taken 6350233 Cannot rename filesystem|volume while it has dependent clones Files: update: usr/src/cmd/zfs/zfs_main.c update:

Working to get ZFS to run on a minimal Solaris 10 U2 configuration. In this scenario, ZFS is included the miniroot which is booted into RAM. When trying to share one of the filesystems, an assertion is raised - see below. If the version of source on OpenSolaris.org matches Solaris 10 U2, then it looks like it''s associated with a popen of /usr/sbin/share. Can anyone shed any

Author: Anthony Scarpino <Anthony.Scarpino at Sun.COM> Repository: /hg/zfs-crypto/gate Latest revision: a2a39602f5d2629c170434c6b35e4b6512d33744 Total changesets: 1 Log message: fix pam module to use zpool_load_key property. Add some better error reporting Files: update: usr/src/lib/libzfs/common/libzfs_crypto.c update: usr/src/lib/pam_modules/zfs_key/zfs_key.c

Author: Darren Moffat <Darren.Moffat at Sun.COM> Repository: /hg/zfs-crypto/gate Latest revision: 349e022c61d22a0a5a493c242c5bc9dad1547086 Total changesets: 1 Log message: 6740837 zfs-crypto, buffer modified while frozen! Files: update: usr/src/uts/common/fs/zfs/zio.c update: usr/src/uts/common/fs/zfs/zio_crypt.c

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/gate Latest revision: d22dab8b3cf8927274becf145e811389891f4fb7 Total changesets: 1 Log message: lint nits and CCM IV/nonce size fix Files: update: usr/src/common/zfs/zcrypt_common.c update: usr/src/uts/common/fs/zfs/zio_crypt.c

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/gate Latest revision: 71562fc59afd47d2db9236f8b5ab505c74140a63 Total changesets: 1 Log message: CRYPTO_INVALID_MAC can be given as errno ECKSUM full fix depends on 6712231 being implemented in ON but this is safe without it Files: update: usr/src/uts/common/fs/zfs/zio_crypt.c

In another thread recursive snapshot creation was found atomic so that it is done quickly, and more important, all at once or nothing at all. Do you know if recursive destroying and renaming of snapshots are atomic too? Regards Henrik Heino

Author: Darren Moffat <Darren.Moffat at Sun.COM> Repository: /hg/zfs-crypto/gate Latest revision: 957d30a3607ed9f3cbe490da5894d1e1b2104033 Total changesets: 28 Log message: resync onnv_105 partial for 6713916 Files: usr/src/Makefile.lint usr/src/Targetdirs usr/src/cmd/Makefile usr/src/cmd/Makefile.cmd usr/src/cmd/acctadm/Makefile usr/src/cmd/acctadm/acctadm.xcl

Hi, Is it expected that if I have filesystem tank/foo and tank/foo/bar (mounted under /tank) then in order to be able to browse via /net down into tank/foo/bar I need to have group/other permissions on /tank/foo open? # zfs create tank/foo # zfs create tank/foo/bar # chown gavinm /tank/foo /tank/foo/bar # zfs set sharenfs=rw tank/foo # ls -laR /tank/foo /tank/foo: total 9 drwxr-xr-x 3 gavinm

http://bugzilla.mindrot.org/show_bug.cgi?id=293 dtucker at zip.com.au changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |DUPLICATE ------- Additional Comments From dtucker at zip.com.au 2002-06-25