[Bug 265625] .zfs/snapshot directory is always readable (also by non-privileged users)

Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 04 Dec 2023 11:08:23 UTC

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=265625

--- Comment #5 from jbe@magnetkern.de ---
There are more security implications of this issue, e.g. when /etc/passwd,
/etc/group, ~/.ssh/authorized_keys etc. get modified while a snapshot exists.
This can lead to people gaining access to files that they never were supposed
to see.

Also see:

https://forums.FreeBSD.org/threads/91178/post-631660

and

https://github.com/openzfs/zfs/discussions/9028#discussioncomment-3331782

-- 
You are receiving this mail because:
You are the assignee for the bug.