-
Notifications
You must be signed in to change notification settings - Fork 1.8k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add recursive dataset mounting support to pam_zfs_key
Introduced functionality to recursively mount datasets with a new config option `mount_recursively`. Adjusted existing functions to handle the recursive behavior and added tests to validate the feature. This enhances support for managing hierarchical ZFS datasets within a PAM context. Signed-off-by: Jerzy Kołosowski <[email protected]>
- Loading branch information
Showing
2 changed files
with
225 additions
and
47 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
82 changes: 82 additions & 0 deletions
82
tests/zfs-tests/tests/functional/pam/pam_mount_recursively.ksh
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,82 @@ | ||
| #!/bin/ksh -p | ||
| # | ||
| # CDDL HEADER START | ||
| # | ||
| # The contents of this file are subject to the terms of the | ||
| # Common Development and Distribution License (the "License"). | ||
| # You may not use this file except in compliance with the License. | ||
| # | ||
| # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE | ||
| # or https://opensource.org/licenses/CDDL-1.0. | ||
| # See the License for the specific language governing permissions | ||
| # and limitations under the License. | ||
| # | ||
| # When distributing Covered Code, include this CDDL HEADER in each | ||
| # file and include the License file at usr/src/OPENSOLARIS.LICENSE. | ||
| # If applicable, add the following below this CDDL HEADER, with the | ||
| # fields enclosed by brackets "[]" replaced with your own identifying | ||
| # information: Portions Copyright [yyyy] [name of copyright owner] | ||
| # | ||
| # CDDL HEADER END | ||
| # | ||
|
|
||
| . $STF_SUITE/tests/functional/pam/utilities.kshlib | ||
|
|
||
| if [ -n "$ASAN_OPTIONS" ]; then | ||
| export LD_PRELOAD=$(ldd "$(command -v zfs)" | awk '/libasan\.so/ {print $3}') | ||
| fi | ||
|
|
||
| username="${username}rec" | ||
|
|
||
| # Set up a deeper hierarchy, a mountpoint that doesn't interfere with other tests, | ||
| # and a user which references that mountpoint | ||
| log_must zfs create "$TESTPOOL/pampam" | ||
| log_must zfs create -o mountpoint="$TESTDIR/rec" "$TESTPOOL/pampam/pam" | ||
| echo "recurpass" | zfs create -o encryption=aes-256-gcm -o keyformat=passphrase \ | ||
| -o keylocation=prompt "$TESTPOOL/pampam/pam/${username}" | ||
| log_must zfs create "$TESTPOOL/pampam/pam/${username}/deep" | ||
| log_must zfs create "$TESTPOOL/pampam/pam/${username}/deep/deeper" | ||
| log_must zfs create -o mountpoint=none "$TESTPOOL/pampam/pam/${username}/deep/none" | ||
| log_must zfs create -o canmount=noauto "$TESTPOOL/pampam/pam/${username}/deep/noauto" | ||
| log_must zfs create -o canmount=off "$TESTPOOL/pampam/pam/${username}/deep/off" | ||
| log_must zfs unmount "$TESTPOOL/pampam/pam/${username}" | ||
| log_must zfs unload-key "$TESTPOOL/pampam/pam/${username}" | ||
| log_must add_user pamtestgroup ${username} "$TESTDIR/rec" | ||
|
|
||
| function keystatus { | ||
| log_must [ "$(get_prop keystatus "$TESTPOOL/pampam/pam/${username}")" = "$1" ] | ||
| } | ||
|
|
||
| log_mustnot ismounted "$TESTPOOL/pampam/pam/${username}" | ||
| keystatus unavailable | ||
|
|
||
| function test_session { | ||
| echo "recurpass" | pamtester ${pamservice} ${username} open_session | ||
| references 1 | ||
| log_must ismounted "$TESTPOOL/pampam/pam/${username}" | ||
| log_must ismounted "$TESTPOOL/pampam/pam/${username}/deep" | ||
| log_must ismounted "$TESTPOOL/pampam/pam/${username}/deep/deeper" | ||
| log_mustnot ismounted "$TESTPOOL/pampam/pam/${username}/deep/none" | ||
| log_mustnot ismounted "$TESTPOOL/pampam/pam/${username}/deep/noauto" | ||
| log_mustnot ismounted "$TESTPOOL/pampam/pam/${username}/deep/off" | ||
| keystatus available | ||
|
|
||
| log_must pamtester ${pamservice} ${username} close_session | ||
| references 0 | ||
| log_mustnot ismounted "$TESTPOOL/pampam/pam/${username}" | ||
| keystatus unavailable | ||
| } | ||
|
|
||
| genconfig "homes=$TESTPOOL/pampam/pam prop_mountpoint mount_recursively runstatedir=${runstatedir}" | ||
| test_session | ||
|
|
||
| genconfig "homes=$TESTPOOL/pampam recursive_homes prop_mountpoint mount_recursively runstatedir=${runstatedir}" | ||
| test_session | ||
|
|
||
| genconfig "homes=$TESTPOOL recursive_homes prop_mountpoint mount_recursively runstatedir=${runstatedir}" | ||
| test_session | ||
|
|
||
| genconfig "homes=* recursive_homes prop_mountpoint mount_recursively runstatedir=${runstatedir}" | ||
| test_session | ||
|
|
||
| log_pass "done." |