zfs crypto discuss - Jun 2008 - [Bug 2114] New: delegation_004: a non-root user can''t do ''zfs key -c'' with keychange delegated

http://defect.opensolaris.org/bz/show_bug.cgi?id=2114

           Summary: delegation_004: a non-root user can''t do
''zfs key -c''
                    with keychange delegated
    Classification: Development
           Product: zfs-crypto
           Version: unspecified
          Platform: Other
        OS/Version: Solaris
            Status: NEW
          Severity: normal
          Priority: P3
         Component: other
        AssignedTo: darrenm at opensolaris.org
        ReportedBy: hua.tang at sun.com
         QAContact: hua.tang at sun.com
                CC: zfs-crypto-discuss at opensolaris.org
   Estimated Hours: 0.0


Msg| 21582 | 1: Testing with keychange delegated, a non-root user can do
''zfs k
ey -c''
Msg| 21582 |
stdout| 21582| /usr/sbin/zpool create -f pool_21582 /export/home/vdev_file_1
stdout| 21582| /usr/bin/expect /export/home/zfscrypto-tests/proto/suites/securi
ty/zfs-crypto/lib/zfs_create.exp                                    /usr/sbin/z
fs pool_21582 fs on hex,prompt 9adf6ac44655ccc414a5e9197a34c52731f5fe08d9191a7c
d3811ab6f69f1078
stdout| 21582| spawn /usr/sbin/zfs create -o encryption=on -o keyscope=dataset
-o keysource=hex,prompt pool_21582/fs^M
stdout| Enter hexadecmial key for ''pool_21582/fs'': ^M^M
stdout| Enter again: ^M^M
stdout| 21582| /usr/sbin/zfs allow zfsc keychange pool_21582/fs
stdout| 21582| /bin/su zfsc -c "/usr/sbin/zfs key -c -o
keysource=hex,file:///e
xport/home/zfscrypto-tests/proto/suites/security/zfs-crypto/etc/hex_key_file po
ol_21582/fs"
stderr| cannot set property for ''pool_21582/fs'': permission
denied
stderr| Key change error: crypto key failure
stdout| 21582| Expected return value: 0
stdout| 21582| Actual return value: 1
Msg| 21582 | [ - Result ]
Msg| 21582 | RESULT:  FAIL

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=2114





--- Comment #1 from Darren J Moffat <darrenm at opensolaris.org> 
2008-06-02 02:30:42 ---
This is a test bug the user needs the "keysource" property as well as
the
"keychange" action delegated for this test to work.

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=2114


Darren J Moffat <darrenm at opensolaris.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |CAUSEKNOWN




-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=2114


Darren J Moffat <darrenm at opensolaris.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
              Alias|                            |BUGSTER:6709495
             Status|CAUSEKNOWN                  |CLOSED
         Resolution|                            |TRACKEDINBUGSTER




--- Comment #2 from Darren J Moffat <darrenm at opensolaris.org> 
2008-06-02 03:36:04 ---
Bugster 6709495

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=2114





--- Comment #3 from Darren J Moffat <darrenm at opensolaris.org> 
2008-06-02 07:51:46 ---
*** Bug 2108 has been marked as a duplicate of this bug. ***

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=2114





--- Comment #4 from Darren J Moffat <darrenm at opensolaris.org> 
2008-06-02 07:52:58 ---
*** Bug 2107 has been marked as a duplicate of this bug. ***

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=2114


David Comay <David.Comay at Sun.COM> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Status Whiteboard|                            |BugsterCR=6709495
                 CC|                            |David.Comay at Sun.COM




-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.