Project

General

Profile

Bug #7528

Feature #1527: SMB server in non-global zones

smbd running in zone cannot create .zfs/shares/<share> object

Added by Dmitry Glushenok almost 3 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
cifs - CIFS server and client
Start date:
2016-11-03
Due date:
% Done:

0%

Estimated time:
Difficulty:
Medium
Tags:
needs-triage

Description

Following error appears in smbd/server SMF log when used in zone:

smbd.info: share: failed to add ACL object: share05: Not owner

This is due to check in zfs_secpolicy_smb_acl() (https://github.com/illumos/illumos-gate/blob/f76886de6cd6914424d9f6c25bd9d93d87889269/usr/src/uts/common/fs/zfs/zfs_ioctl.c#L781):

    if (!INGLOBALZONE(curproc))
        return (SET_ERROR(EPERM));

Regardless of the error the dataset become shared and available for use.

Also available in: Atom PDF