zfs crypto discuss - Jun 2008 - [Bug 2123] New: delegation_003: ''zfs key -u'' changes the owner and group of mountpoint

http://defect.opensolaris.org/bz/show_bug.cgi?id=2123

           Summary: delegation_003: ''zfs key -u'' changes the
owner and group
                    of mountpoint
    Classification: Development
           Product: zfs-crypto
           Version: unspecified
          Platform: Other
        OS/Version: Solaris
            Status: NEW
          Severity: normal
          Priority: P3
         Component: other
        AssignedTo: darrenm at opensolaris.org
        ReportedBy: hua.tang at sun.com
         QAContact: hua.tang at sun.com
                CC: zfs-crypto-discuss at opensolaris.org
   Estimated Hours: 0.0


stdout| 113710| /usr/sbin/zpool create -f pool_113710 /export/home/vdev_file_1
stdout| 113710| /usr/sbin/zfs create -o encryption=on -o keyscope=dataset -o
keysource=hex,file:///export/home/zfscrypto-tests/proto/su
ites/security/zfs-crypto/etc/hex_key_file pool_113710/fs_1
stdout| 113710| cp
/export/home/zfscrypto-tests/proto/suites/security/zfs-crypto/etc/file1.txt
/pool_113710/fs_1
stdout| 113710| /usr/bin/chown -R zfsc:other /pool_113710/fs_1
stdout| 113710| /usr/sbin/zfs allow zfsc keyuse,mount pool_113710/fs_1
Msg| 113710 | [ - Progress ]
Msg| 113710 | 1: Testing with keyuse,mount delegated,a non-root user can do
''zfs key -u''
Msg| 113710 |
stdout| 113710| /bin/su zfsc -c "/usr/sbin/zfs key -u
pool_113710/fs_1"
stdout| 113710| ls -l /pool_113710 | grep fs_1
stdout| 113710| drwxr-xr-x   2 root     staff          2 Jun  3 00:21 fs_1
stdout| 113710| Expected owner of /pool_113710/fs_1: zfsc
stdout| 113710| Actual owner: root
stdout| 113710| Expected group of /pool_113710/fs_1: other
stdout| 113710| Acutal group: staff
Msg| 113710 | [ - Result ]
Msg| 113710 | RESULT:  FAIL

No matter the unload operation is done by root or delegated user, it changes
the owner and group.

#  zpool create test /export/home/testfile
# zfs create -o encryption=on -o keysource=passphrase,prompt -o
keyscope=dataset test/fs
Enter passphrase for ''test/fs'': 
Enter again: 
#  chown -R zfsc:other /test
# ls -l /test
total 3
drwxr-xr-x   2 zfsc     other          2 Jun  3 00:26 fs
# zfs key -u test/fs
# ls -l /test
total 3
drwxr-xr-x   2 root     root           2 Jun  3 00:26 fs

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=2123


Darren J Moffat <darrenm at opensolaris.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         AssignedTo|darrenm at opensolaris.org     |hua.tang at sun.com
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID




--- Comment #1 from Darren J Moffat <darrenm at opensolaris.org> 
2008-06-18 07:15:40 ---
This is not a product but but a test suite bug.  The test is incorrectly
looking at the permissions of the underlying mount point.  The same behaviour
can be seen without using encryption and by just using plain zfs umount.  In
fact this isn''t even ZFS specific.

braveheart$ zfs create tank/fs
braveheart# chown zfsc:other /tank/fs
braveheart# ls -dl /tank/fs 
drwxr-xr-x   2 zfsc     other          2 Jun 18 15:02 /tank/fs
braveheart# zfs umount tank/fs
braveheart# ls -dl /tank/fs   
drwxr-xr-x   2 root     root           2 Jun 18 15:02 /tank/fs

Or with UFS:

braveheart# mount /dev/lofi/1 /mnt 
braveheart# chown zfsc:other /mnt
braveheart# ls -ld /mnt
drwxr-xr-x   3 zfsc     other        512 Jun 18 15:06 /mnt
braveheart# umount /mnt
braveheart# ls -ld /mnt
drwxr-xr-x   2 root     sys          512 May 21 17:06 /mnt



Assigning to Grace to fix the test suite as I can''t even find where in
the test
suite generates this message.

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=2123





--- Comment #2 from Grace <hua.tang at sun.com>  2008-06-19 00:40:49 ---
I fixed it in my workspace. I have been not able to connect to bugster today,
so I couldn''t file a test bug. I''ll putback the changes
tomorrow.

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=2123





--- Comment #3 from Grace <hua.tang at sun.com>  2008-06-22 22:53:04 ---
See bugster 6717702. Fix delivered.

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.