[Bug 265625] .zfs/snapshot directory is always readable (also by non-privileged users)
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Mon, 04 Dec 2023 22:55:59 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=265625
Xin LI <delphij@FreeBSD.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |delphij@FreeBSD.org
--- Comment #6 from Xin LI <delphij@FreeBSD.org> ---
I think this can probably be addressed by changing `zfsctl_ctldir_mode`
(sys/contrib/openzfs/module/os/freebsd/zfs/zfs_ctldir.c) to `S_IRUSR | S_IXUSR`
(or `S_IRUSR | S_IXUSR | S_IRGRP | S_IXGRP`) with a loader tunable, so the .zfs
is only accessible by root (or root plus the wheel group).
--
You are receiving this mail because:
You are the assignee for the bug.