Hi,

Am I right to assume ZFS currently doesn't support the least privilege model ?
I'm trying to make bacula run as non root on zfs and be able to restore
files a non-root with the correct least privilege modes but when I
enable debugging with ppriv -D <pid> I get

Nov  5 20:39:27 corona genunix: [ID 702911 kern.notice] bacula-fd[9685]: 
missing privilege "ALL" (euid = 110, syscall = 5) needed at zfs_zaccess+0x1fc

Currently I have the following privs for bacula:

basic
file_chown
file_chown_self
file_dac_read
file_dac_search
file_dac_write
file_owner
file_setid
file_flag_set

and thought I would get the priv that is missing when running the debugging.

Marco
-- 
This message posted from opensolaris.org
_______________________________________________
zfs-discuss mailing list
zfs-discuss@opensolaris.org
http://mail.opensolaris.org/mailman/listinfo/zfs-discuss

Reply via email to