6765 zfs_zaccess_delete() comments do not accurately reflect delete permissions for ACLs Reviewed by: Gordon Ross <gwr@nexenta.com> Reviewed by: Yuri Pankov <yuri.pankov@nexenta.com> Approved by: Richard Lowe <richlowe@richlowe.net>

6764 zfs issues with inheritance flags during chmod(2) with aclmode=passthrough Reviewed by: Gordon Ross <gwr@nexenta.com> Reviewed by: Yuri Pankov <yuri.pankov@nexenta.com> Approved by: Richard Lowe <richlowe@richlowe.net>

6763 aclinherit=restricted masks inherited permissions by group perms (groupmask) Reviewed by: Gordon Ross <gwr@nexenta.com> Reviewed by: Yuri Pankov <yuri.pankov@nexenta.com> Approved by: Richard Lowe <richlowe@richlowe.net>

6762 POSIX write should imply DELETE_CHILD on directories - and some additional considerations Reviewed by: Gordon Ross <gwr@nexenta.com> Reviewed by: Yuri Pankov <yuri.pankov@nexenta.com> Approved by: Richard Lowe <richlowe@richlowe.net>

3742 zfs comments need cleaner, more consistent style Reviewed by: Matthew Ahrens <mahrens@delphix.com> Reviewed by: George Wilson <george.wilson@delphix.com> Reviewed by: Eric Schrock <eric.schrock@delphix.com> Approved by: Christopher Siden <christopher.siden@delphix.com>

3598 want to dtrace when errors are generated in zfs Reviewed by: Dan Kimmel <dan.kimmel@delphix.com> Reviewed by: Adam Leventhal <ahl@delphix.com> Reviewed by: Christopher Siden <christopher.siden@delphix.com> Approved by: Garrett D'Amore <garrett@damore.org>

742 Resurrect the ZFS "aclmode" property 664 Umask masking "deny" ACL entries. 279 Bug in the new ACL (post-PSARC/2010/029) semantics Reviewed by: Aram Hăvărneanu <aram@nexenta.com> Reviewed by: Gordon Ross <gwr@nexenta.com> Reviewed by: Robert Gordon <rbg@openrbg.com> Reviewed by: Mark.Maybee@oracle.com Approved by: Garrett D'Amore <garrett@nexenta.com>

6975482 assertion failed: error == 0 (0x2 == 0x0), file: ../../common/fs/zfs/zfs_vnops.c, line: 1630 6975131 zfs_remove leaks xattr vnode holds, which can lead to zone halt problem 6975190 memory leak after zfs stress testing

6971929 Unable to add/remove ACE after doing idmap flush -a

6973827 ACL upgrade from zpl version 2 -> 4 don't grab all the necessary tx holds.

6957974 assertion failed: 0 == sa_lookup(zp->z_sa_hdl, SA_ZPL_ZNODE_ACL(zp->z_zfsvfs) 6960907 zfs_rezget() has uninitialized z_mode variable

6947609 not inheriting inherit_only directories correctly

PSARC 2009/377 In-kernel pfexec implementation. PSARC 2009/378 Basic File Privileges PSARC 2010/072 RBAC update: user attrs from profiles 4912090 pfzsh(1) should exist 4912093 pfbash(1) should exist 4912096 pftcsh(1) should exist 6440298 Expand the basic privilege set in order to restrict file access 6859862 Move pfexec into the kernel 6919171 cred_t sidesteps kmem_debug; we need to be able to detect bad hold/free when they occur 6923721 The new SYS_SMB privilege is not backward compatible 6937562 autofs doesn't remove its door when the zone shuts down 6937727 Zones stuck on deathrow; netstack_zone keeps a credential reference to the zone 6940159 Implement PSARC 2010/072

6945935 potential mutex problem in zfs_zaccess_aces_check()

PSARC/2010/029 Improved ACL interoperability 6923083 ZFS/NFS/SMB ACL interoperability changes

PSARC/2010/009 Modified ZFS passthrough-x ACL inheritance 6935418 passthrough-x should apply to all ACEs

6716117 ZFS needs native system attribute infrastructure 6516171 zpl symlinks should have their own object type

6901694 Panic attempting to write zfs credentials 6912726 panic in zfs_log_create() due to NULL z_fuidp not populated in zfs_acl_ids_create()

6906110 bad trap panic in zil_replay_log_record 6906946 zfs replay isn't handling uid/gid correctly

6870564 panic in zfs_getsecattr

6865875 zfs sometimes incorrectly giving search access to a dir

6857433 memory leaks found at: zfs_acl_alloc/zfs_acl_node_alloc 6860318 truncate() on zfsroot succeeds when file has a component of its path set without access permission

6775100 stat() performance on files on zfs should be improved 6827779 rrwlock is overly protective of its counters

6848431 zfs with rstchown=0 or file_chown_self privilege allows user to "take" ownership

PSARC 2009/246 ZFS support for Access Based Enumeration 6802734 Support for Access Based Enumeration 6826760 A test driver for some ZFS features would be beneficial 6844861 inconsistent xattr readdir behavior with too-small buffer

6801810 Commit of aligned streaming rewrites to ZIL device causes unwanted disk reads

PSARC/2009/204 ZFS user/group quotas & space accounting 6501037 want user/group quotas on ZFS 6830813 zfs list -t all fails assertion 6827260 assertion failed in arc_read(): hdr == pbuf->b_hdr 6815592 panic: No such hold X on refcount Y from zfs_znode_move 6759986 zfs list shows temporary %clone when doing online zfs recv

6790064 zfs needs to determine uid and gid earlier in create process

6809529 dirtying snapshot! rears its head again

6765294 Refactor replay

PSARC/2008/659 New ZFS "passthrough-x" ACL inheritance rules 6765166 Need to provide mechanism to optionally inherit ACE_EXECUTE

6744510 Should not allow to rename a file/folder when a user does not have permission

6746456 ZFS doesn't inherit old ACLs correctly on upgraded file system

6736457 dmu_tx_dirty_buf+297 panic while Win2003 is copying i386 folder from win2003 CD-ROM to Nevada

PSARC 2008/486 Intent log replay failure handling 6707530 log device failure needs some work

6723181 delete deny permissions broken

PSARC/2008/342 Further SID support 6677411 chmod when faced with deleting more than one acl in one go will only remove the first ACL 6677801 *chmod* Could be more efficient when deleting ACLs 6682126 *chmod* reports invalid user when it means invalid group 6682138 *chmod* Recursive setting of inherit ACLs reports errors for all files. 6682943 Request for aliases to simplify setting ACL permissions 6699852 ZFS should allow storing inheritance flags in file ACLs 6703748 ZFS allows deletes on a readonly file system 6710731 chown(1)/chgrp(1) SID support 6710735 tar/cpio ACL/SID support 6714392 want more SID support

PSARC/2008/231 New ZFS "passthrough" ACL inheritance rules 6538405 ZFS needs mechanism to bypass file creation mode

6674548 zfs_delete_final_check calls secpolicy_vnode_access on wrong vnode

6664536 zfs O_RDWR access check more stringent than tmpfs or ufs

6650192 zfs ACL/fuid code could use some minor cleanup 6650223 zdb znode output should include uid/gid and possible SID information 6657644 zfs_fuid_init() panic

6603908 can't change mode if FS/dir is out of quota

6552639 Each zone should have it's own idmapd

6646907 mismerge in zfs_mode_fuid_compute()

6601830 mismatch between zfs_mount() behavior and comment 6630698 aclmode=discard may leak memory

6624956 zfs_log_fuid_ids can cause panic on sparc 6626168 zfs can incorrectly log uids for failed mappings 6626566 zfs ace splitting not working quite right

PSARC/2007/218 caller_context_t in all VOPs PSARC/2007/227 VFS Feature Registration and ACL on Create PSARC/2007/244 ZFS Case-insensitive support PSARC/2007/315 Extensible Attribute Interfaces PSARC/2007/394 ls(1) new command line options '-/' and '-%': CIFS system attributes support PSARC/2007/403 Modified Access Checks for CIFS PSARC/2007/410 Add system attribute support to chmod(1) PSARC/2007/432 CIFS system attributes support for cp(1), pack(1), unpack(1), compress(1) and uncompress(1) PSARC/2007/444 Rescind SETTABLE Attribute PSARC/2007/459 CIFS system attributes support for cpio(1), pax(1), tar(1) PSARC/2007/546 Update utilities to match CIFS system attributes changes. PSARC/2007/560 ZFS sharesmb property 4890717 want append-only files 6417428 Case-insensitive file system name lookup to support CIFS 6417435 DOS attributes and additional timestamps to support for CIFS 6417442 File system quarantined and modified attributes to support an integrated Anti-Virus service 6417453 FS boolean property for rejecting/allowing invalid UTF-8 sequences in file names 6473733 RFE: Need support for open-deny modes 6473755 RFE: Need ability to reconcile oplock and delegation conflicts 6494624 sharemgr needs to support CIFS shares better 6546705 All vnode operations need to pass caller_context_t 6546706 Need VOP_SETATTR/VOP_GETATTR to support new, optional attributes 6546893 Solaris system attribute support 6550962 ZFS ACL inheritance needs to be enhanced to support Automatic Inheritance 6553589 RFE: VFS Feature Registration facility 6553770 RFE: ZFS support for ACL-on-CREATE (PSARC 2007/227) 6565581 ls(1) should support file system attributes proposed in PSARC/2007/315 6566784 NTFS streams are not copied along with the files. 6576205 cp(1), pack(1) and compress(1) should support file system attributes proposed in PSARC/2007/315 6578875 RFE: kernel interfaces for nbmand need improvement 6578883 RFE: VOP_SHRLOCK needs additional access types 6578885 chmod(1) should support file system attributes proposed in PSARC/2007/315 6578886 RFE: disallow nbmand state to change on remount 6583349 ACL parser needs to support audit/alarm ACE types 6590347 tar(1) should support filesystem attributes proposed in PSARC/2007/315 6597357 *tar* xv@ doesn't show the hidden directory even though it is restored 6597360 *tar* should re-init xattr info if openat() fails during extraction of and extended attribute 6597368 *tar* cannot restore hard linked extended attributes 6597374 *tar* doesn't display "x " when hard linked attributes are restored 6597375 *tar* extended attribute header off by one 6614861 *cpio* incorrectly archives extended system attributes with -@ 6614896 *pax* incorrectly archives extended system attributes with -@ 6615225 *tar* incorrectly archives extended system attributes with -@ 6617183 CIFS Service - PSARC 2006/715

6590376 Fails to chmod on a zfs volume with windows ACL

PSARC 2007/064 Unified POSIX and Windows Credentials for Solaris 4994017 data structure sharing between rpcbind and libnsl leads to accidents 6549510 Need the ability to store SIDs in the Solaris cred_t 6549515 PSARC 2007/064: uid_t and gid_t to become unsigned

6528189 cp -p invalid argument issue on Redhat linux AS 3.0 NFS client against ZFS NFS directory

PSARC 2006/486 ZFS canmount property PSARC 2006/497 ZFS create time properties PSARC 2006/502 ZFS get all datasets PSARC 2006/504 ZFS user properties 6269805 properties should be set via an nvlist. 6281585 user defined properties 6349494 'zfs list' output annoying for even moderately long dataset names 6366244 'canmount' option for container-like functionality 6367103 create-time properties 6416639 RFE: provide zfs get -a 6437808 ZFS module version should match on-disk version 6454551 'zfs create -b blocksize filesystem' should fail. 6457478 unrecognized character in error message with 'zpool create -R' command 6457865 missing device name in the error message of 'zpool clear' command 6458571 zfs_ioc_set_prop() doesn't validate input 6458614 zfs ACL #defines should use prefix 6458638 get_configs() accesses bogus memory 6458678 zvol functions should be moved out of zfs_ioctl.h 6458683 zfs_cmd_t could use more cleanup 6458691 common routines to manage zfs_cmd_t nvlists 6460398 zpool import cores on zfs_prop_get 6461029 zpool status -x noexisting-pool has incorrect error message. 6461223 index translations should live with property definitions 6461424 zpool_unmount_datasets() has some busted logic 6461427 zfs_realloc() would be useful 6461757 'zpool status' can report the wrong number of persistent errors 6461784 recursive zfs_snapshot() leaks memory

6413510 zfs: writing to ZFS filesystem slows down fsync() on other files in the same FS 6453172 ztest turns into a sloth due to massive arc_min_prefetch_lifespan

6461609 zfs delete permissions are not working correctly

6430121 3-way deadlock involving tc_lock within zfs

6362990 server returns OK on NVERIFY of maxlink/maxfilesize with NFSv4/ZFS 6366301 CREATE with owner_group attribute is not set correctly with NFSv4/ZFS 6373971 xdr_cnfs_resop4_wrap is dead code

6380036 zfs does not clear S_ISUID and S_ISGID bits on successful writes 6388195 conflict of filesystem property of "aclinherit=secure" & ACE no_propagate 6389212 file_dac_search privilege is ineffective when traversing zfs mount point

PSARC 2006/077 zpool clear PSARC 2006/139 FMA for ZFS 6284889 arc should replace the znode cache 6333006 DMU & DSL should not panic upon I/O error 6333092 concurrent reads to a file not scaling with number of readers 6338081 ZFS/FMA phase 1 6338386 need persistent error log 6341326 i/o error causes arc buf hash table corruption 6341639 zfs backup/restore should compute/verify checksum of backup stream 6348002 out of space due to changing properties 6354724 inaccurate error message from zfs restore 6354872 dmu_sync() blows predictive accounting 6355416 zpool scrubbing consumes all memory, system hung 6363995 df should only load libzfs when it encounters a ZFS filesystem 6366320 zfs backup/restore doesn't like signals 6368892 mount -m support needed for legacy mounts 6368902 boot archive fstat support needed for ZFS Mountroot 6369424 BFU complains when bfu'ing a ZFS root filesystem 6374062 mountroot support needed for ZFS 6376356 dirtying dbuf obj=43 lvl=0 blkid=0 but not tx_held 6378391 unused members of dmu_objset_stats_t 6378392 clean up zfs_cmd_t structure 6378685 buf_init should allocate its hash table more carefully 6378976 ziltest should be a first class citizen 6381086 zdb segfaults if there is a spa deferred-free bplist 6381203 deadlock due to i/o while assigning (tc_lock held) 6381209 freed space is not immediately available 6381344 'zpool clear' 6381345 FAULTED devices should really be UNAVAIL 6381346 import should mark devices as persistently unavailable 6383272 recursive mutex_enter() during log replay with zfs root 6386326 origin property is not displayed 6386354 libzfs does too much in its _init section, calls exit(1) 6386624 zpool should not complain about non-existent devices from libdiskmgt 6386910 spa needs to be i/o error hardened 6387735 need a mechanism to inject faults into ZFS 6387736 internal ZFS utilities should be placed in an ON-private package 6389928 libzfs should ship a lint library 6390609 malformed vdev config panics on zpool_create() 6390677 version number checking makes upgrades challenging 6390713 ztest hangs in zil_suspend() 6391873 metadata compression should be turned back on 6392113 ztest sometimes reports leaked blocks because ZIL isn't resilvered 6393004 minor memory leak in unique_insert()

6362908 nfsv4-test: RENAME does not check PERM with NFSv4/ZFS 6372549 nfsv4 server returns OK for SETATTR of size on a symlink over ZFS, INVAL is expected

6350871 chmod doesn't work correctly when creating a directory and inheriting file_inherit/no_propagate.

6347134 zfs_zaccess() is killing ZFS stat() performance 6348240 zfs set aclinherit error message incorrect

6344681 chmod file_inherit should not added the specified ACE to new create subdirectores. 6346223 chmod A=<acl_specification> not replacing entire ACL

PSARC 2002/240 ZFS 6338653 Integrate ZFS PSARC 2004/652 - DKIOCFLUSH 5096886 Write caching disks need mechanism to flush cache to physical media