zfs discuss - Aug 2006 - privileges needed for a snapshot

Hi everybody,

this question has probably been asked before, but I couldn''t find an
answer to it anywhere...

What privileges are require to be able to do a snapshot as a regular user? Is it
already possible to pass ownership of a ZFS filesystem to a specific user, so
that he''s able to do a snapshot/rollback? Are there plans to support it
directly in ZFS or will one have to use an RBAC based approach?

Any pointers?

TIA,
Tom
 
 
This message posted from opensolaris.org

Today you can give someone the ''ZFS File System Management''
role to
allow them to manipulate ZFS datasets.  For finer grained control,
we''re
planning on building it directly into ZFS:

http://www.opensolaris.org/jive/thread.jspa?threadID=11130&tstart=15

Feel free to comment on the details in the above thread - it''s still a
work in progress.

- Eric

On Tue, Aug 01, 2006 at 07:33:59AM -0700, Thomas Maier-Komor
wrote:
> Hi everybody,
> 
> this question has probably been asked before, but I couldn''t find
an answer to it anywhere...
> 
> What privileges are require to be able to do a snapshot as a regular user?
Is it already possible to pass ownership of a ZFS filesystem to a specific user,
so that he''s able to do a snapshot/rollback? Are there plans to support
it directly in ZFS or will one have to use an RBAC based approach?
> 
> Any pointers?
> 
> TIA,
> Tom
>  
>  
> This message posted from opensolaris.org
> _______________________________________________
> zfs-discuss mailing list
> zfs-discuss at opensolaris.org
> http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
--
Eric Schrock, Solaris Kernel Development       http://blogs.sun.com/eschrock

On Tue, Aug 01, 2006 at 05:31:24PM +0200, Thomas Maier-Komor
wrote:
> 
> Thanks for the pointer. This looks exactly like what I am currently
> missing. The idea of having permission sets looks beneficial, too.
> 
> Will this go into the next or a following update release of Solaris 10
> or will it probably take longer to implement and test?
I can say for certain that it won''t be in Update 3.  After that,
It''s
hard to say.  Once it integrates into Nevada we''ll have a better idea
which Solaris 10 update it will appear in.

- Eric

--
Eric Schrock, Solaris Kernel Development       http://blogs.sun.com/eschrock