mirror_zfs/cmd
shodanshok 201d262949
Add receive:append permission for limited receive
Force receive (zfs receive -F) can rollback or destroy snapshots and
file systems that do not exist on the sending side (see zfs-receive man
page). This means an user having the receive permission can effectively
delete data on receiving side, even if such user does not have explicit
rollback or destroy permissions.

This patch adds the receive:append permission, which only permits
limited, non-forced receive. Behavior for users with full receive
permission is not changed in any way.

Fixes #16943
Reviewed-by: Ameer Hamza <ahamza@ixsystems.com>
Reviewed-by: Alexander Motin <mav@FreeBSD.org>
Signed-off-by: Gionatan Danti <g.danti@assyoma.it>
Closes #17015
2025-03-13 13:54:14 -04:00
..
raidz_test build: rename FORCEDEBUG_CPPFLAGS to LIBZPOOL_CPPFLAGS 2024-08-27 12:53:27 -07:00
zdb Fix deduplication of overridden blocks 2025-03-13 13:27:57 -04:00
zed zed: Print return code on failed zpool_prepare_disk 2025-03-12 09:52:36 -04:00
zfs Add receive:append permission for limited receive 2025-03-13 13:54:14 -04:00
zinject zinject: add "probe" device injection type 2025-01-22 16:13:21 -08:00
zpool Fix typos in zpool_do_scrub() error messages (#17028) 2025-02-05 15:53:33 -08:00
zpool_influxdb Do not report bytes skipped by scan as issued. 2023-06-30 08:47:13 -07:00
zstream zio_compress: introduce max size threshold 2024-09-19 17:23:58 -07:00
arc_summary Remove hash_elements_max accounting from DBUF and ARC 2024-11-19 07:00:16 -08:00
arcstat.in arcstat: add structural, types, states breakdown 2024-09-18 11:44:18 -07:00
dbufstat.in Consider dnode_t allocations in dbuf cache size accounting 2023-11-17 13:25:53 -08:00
fsck.zfs.in cmd: move single-file binaries up, extract udev programs to udev/ 2022-05-10 10:20:34 -07:00
Makefile.am build: rename FORCEDEBUG_CPPFLAGS to LIBZPOOL_CPPFLAGS 2024-08-27 12:53:27 -07:00
mount_zfs.c Make mount.zfs(8) calling zfs_mount_at for legacy mounts as well 2024-08-23 10:39:09 -07:00
zfs_ids_to_path.c Replace dead opensolaris.org license link 2022-07-11 14:16:13 -07:00
zgenhostid.c Replace dead opensolaris.org license link 2022-07-11 14:16:13 -07:00
zhack.c Support for longnames for files/directories (Linux part) 2024-10-01 13:40:27 -07:00
zilstat.in zil: add stats for commit failure/fallback (#16315) 2024-07-25 16:53:59 -07:00
ztest.c ztest: Fix scrub check in ztest_raidz_expand_check() 2024-10-08 20:41:17 -07:00
zvol_wait zvol_wait logic may terminate prematurely 2022-10-11 12:12:04 -07:00