ZFS, noexec and snapshots

[Patrick Proniewski]

Hello,

I'm using ZFS with periodic snapshot creation, so users can easily "go back in time" in their data by browsing .zfs/snapshot/.
Every ZFS volume is made with noexec, but I've just find out that the automount of .zfs/snapshot/* is not made with the noexec option.

Is there something that needs explicit configuration?

# zfs list -t all -r -o mountpoint,name,exec tank/user/foobar
MOUNTPOINT     NAME                        EXEC
/user/foobar  tank/user/foobar             off
-             tank/user/foobar at weekly.3    on
-             tank/user/foobar at weekly.2    on
-             tank/user/foobar at weekly.1    on
-             tank/user/foobar at weekly.0    on

# zfs get all tank/user
NAME       PROPERTY              VALUE                  SOURCE
tank/user  type                  filesystem             -
tank/user  creation              Tue Feb 22 14:17 2011  -
tank/user  used                  26.8G                  -
tank/user  available             93.5G                  -
tank/user  referenced            188K                   -
tank/user  compressratio         1.08x                  -
tank/user  mounted               yes                    -
tank/user  quota                 none                   default
tank/user  reservation           none                   default
tank/user  recordsize            128K                   default
tank/user  mountpoint            /user                  local
tank/user  sharenfs              off                    default
tank/user  checksum              on                     default
tank/user  compression           gzip                   inherited from tank
tank/user  atime                 on                     default
tank/user  devices               on                     default
tank/user  exec                  off                    inherited from tank
tank/user  setuid                on                     default
tank/user  readonly              off                    default
tank/user  jailed                off                    default
tank/user  snapdir               hidden                 default
tank/user  aclmode               groupmask              default
tank/user  aclinherit            restricted             default
tank/user  canmount              on                     default
tank/user  shareiscsi            off                    default
tank/user  xattr                 off                    temporary
tank/user  copies                1                      default
tank/user  version               4                      -
tank/user  utf8only              off                    -
tank/user  normalization         none                   -
tank/user  casesensitivity       sensitive              -
tank/user  vscan                 off                    default
tank/user  nbmand                off                    default
tank/user  sharesmb              off                    default
tank/user  refquota              none                   default
tank/user  refreservation        none                   default
tank/user  primarycache          all                    default
tank/user  secondarycache        all                    default
tank/user  usedbysnapshots       0                      -
tank/user  usedbydataset         188K                   -
tank/user  usedbychildren        26.8G                  -
tank/user  usedbyrefreservation  0                      -



Patrick PRONIEWSKI
-- 
Administrateur Système - DSI - Université Lumière Lyon 2