[OpenIndiana-discuss] zfs snapshot script

[Dan Swartzendruber]

Good point!

-----Original Message-----
From: Matt Connolly [mailto:matt.connolly.au at gmail.com] 
Sent: Sunday, May 01, 2011 5:14 PM
To: Discussion list for OpenIndiana
Cc: Discussion list for OpenIndiana
Subject: Re: [OpenIndiana-discuss] zfs snapshot script

Thanks Gary - best answer!!

"zfs allow" is exactly what I was looking for. (also great to learn the
extra -t trick with sudo, thanks to others).

And yes, "zfs allow" does apply only to one filesystem (or optionally
including its descendants).


Best,
Matt.

On 02/05/2011, at 1:38 AM, Gary Mills <mills at cc.umanitoba.ca> wrote:

> On Sun, May 01, 2011 at 08:23:25AM -0700, Reginald Beardsley wrote:
>> "Are there any permission tricks that would allow a script executed via
ssh
>> to execute "zfs snapshot"??"
>> 
>> It's called setuid bit.   There are a host of security concerns
>> around setuid scripts and programs, so consider how you set things
>> up and what your risks are.
> 
> Did you consider `zfs allow'?
> 
> -- 
> -Gary Mills-        -Unix Group-        -Computer and Network Services-
> 
> _______________________________________________
> OpenIndiana-discuss mailing list
> OpenIndiana-discuss at openindiana.org
> http://openindiana.org/mailman/listinfo/openindiana-discuss

_______________________________________________
OpenIndiana-discuss mailing list
OpenIndiana-discuss at openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss