Pawel Jakub Dawidek wrote:
> On Tue, Jun 26, 2007 at 07:45:51AM -0700, Mark.Shellenbaum at Sun.COM wrote:
>> Author: marks
>> Repository: /hg/onnv/onnv-gate
>> Latest revision: 12bb2876a62ea4f4c1b28320f39a0d30334fdf21
>> Total changesets: 1
>> Log message:
>> PSARC/2006/465 ZFS Delegated Administration
>> PSARC/2006/577 zpool property to disable delegation
>> PSARC/2006/625 Enhancements to zpool history
>> PSARC/2007/228 ZFS delegation amendments
>> PSARC/2007/295 ZFS Delegated Administration Addendum
>> 6280676 restore "owner" property
>> 6349470 investigate non-root restore/backup
>> 6572465 'zpool set bootfs=...' records history as 'zfs set bootfs=...'
>
> In this commit you changed:
>
> { zfs_ioc_set_prop, zfs_secpolicy_write, dataset_name },
>
> to:
>
> { zfs_ioc_set_prop, zfs_secpolicy_none, dataset_name, B_TRUE },
>
> Was that intended? Is zfs_secpolicy_none() safe for zfs_ioc_set_prop()?
>
Yes, that was intended. The permission to set specific properties is
checked in zfs_set_prop_nvlist() via zfs_secpolicy_write_perms().
-Mark
