Fix typo in filesystem perm check (#13563)
(cherry picked from commit 7d6bc4bd966241de9b19f668c9e0c7e68cbbd92b)
Co-authored-by: Andrew Walker <awalker at ixsystems.com>
Speed up ACL execute permissions check (#13554) (#13555)
The validation that ACL entries have ability to chdir to specified
path had relatively terrible performance because it was forking
a worker process for each change_to_user operation. This commit
refactors so that we only fork once for validating the entire ACL.
This required refactoring our user context code to leave the
saved UID and saved GID in-tact so that we can repeatedly
setresuid and setresgid from same child process.
(cherry picked from commit d0c29fc474dc41a681fe089cd8c1c103856a3406)
Co-authored-by: Andrew Walker <awalker at ixsystems.com>
Speed up ACL execute permissions check (#13554)
The validation that ACL entries have ability to chdir to specified
path had relatively terrible performance because it was forking
a worker process for each change_to_user operation. This commit
refactors so that we only fork once for validating the entire ACL.
This required refactoring our user context code to leave the
saved UID and saved GID in-tact so that we can repeatedly
setresuid and setresgid from same child process.
(cherry picked from commit d0c29fc474dc41a681fe089cd8c1c103856a3406)
Speed up ACL execute permissions check (#13554)
The validation that ACL entries have ability to chdir to specified
path had relatively terrible performance because it was forking
a worker process for each change_to_user operation. This commit
refactors so that we only fork once for validating the entire ACL.
This required refactoring our user context code to leave the
saved UID and saved GID in-tact so that we can repeatedly
setresuid and setresgid from same child process.
Speed up ACL execute permissions check
The validation that ACL entries have ability to chdir to specified
path had relatively terrible performance because it was forking
a worker process for each change_to_user operation. This commit
refactors so that we only fork once for validating the entire ACL.
This required refactoring our user context code to leave the
saved UID and saved GID in-tact so that we can repeatedly
setresuid and setresgid from same child process.
Recursively mount root dataset during boot if it is not encrypted
Import the pools during boot without mounting any of the datasets.
Check on 'feature at encryption' for imported pool. If feature is not
active, recursively mount the root datasets, which effectively
mounts all datasets present on the pool.
If the encryption feature is active, continue and unlock the
datasets.
Signed-off-by: Umer Saleem <usaleem at ixsystems.com>
Recursively mount root dataset during boot if it is not encrypted
Import the pools during boot without mounting any of the datasets.
Check on 'feature at encryption' for imported pool. If feature is not
active, recursively mount the root datasets, which effectively
mounts all datasets present on the pool.
If the encryption feature is active, continue and unlock the
datasets.
Signed-off-by: Umer Saleem <usaleem at ixsystems.com>
