1#!/bin/ksh -p
2#
3# CDDL HEADER START
4#
5# The contents of this file are subject to the terms of the
6# Common Development and Distribution License (the "License").
7# You may not use this file except in compliance with the License.
8#
9# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10# or http://www.opensolaris.org/os/licensing.
11# See the License for the specific language governing permissions
12# and limitations under the License.
13#
14# When distributing Covered Code, include this CDDL HEADER in each
15# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16# If applicable, add the following below this CDDL HEADER, with the
17# fields enclosed by brackets "[]" replaced with your own identifying
18# information: Portions Copyright [yyyy] [name of copyright owner]
19#
20# CDDL HEADER END
21#
22
23#
24# Copyright 2007 Sun Microsystems, Inc.  All rights reserved.
25# Use is subject to license terms.
26#
27# Copyright (c) 2012 by Marcelo Leal. All rights reserved.
28#
29
30#
31# Copyright (c) 2016 by Delphix. All rights reserved.
32#
33
34. $STF_SUITE/tests/functional/acl/acl_common.kshlib
35
36#
37# DESCRIPTION:
38# Verify that 'cpio' command with -P option supports to archive ZFS ACLs
39#
40# STRATEGY:
41# 1. Create file and directory in zfs filesystem
42# 2. Add new ACE in ACL or change mode of file and directory
43# 3. Use cpio to archive file and directory
44# 4. Extract the archive file
45# 5. Verify that the restored ACLs of file and directory identify
46#    with the origional ones.
47#
48
49verify_runnable "both"
50
51function cleanup
52{
53	if datasetexists $TESTPOOL/$TESTFS1; then
54		log_must zfs destroy -f $TESTPOOL/$TESTFS1
55	fi
56	if (( ${#orig_dir} != 0 )); then
57		cd $orig_dir
58	fi
59	[[ -d $TESTDIR1 ]] && log_must rm -rf $TESTDIR1
60	[[ -d $TESTDIR ]] && log_must rm -rf $TESTDIR/*
61}
62
63log_assert "Verify that 'cpio' command supports to archive ZFS ACLs."
64log_onexit cleanup
65
66set -A ops "A+user:$ZFS_ACL_OTHER1:execute:allow" \
67	"A3+user:$ZFS_ACL_OTHER1:write_data:deny" \
68	"A0+user:$ZFS_ACL_OTHER1:write_data:deny" \
69	"A3+group:$ZFS_ACL_OTHER_GROUP:read_data:deny" \
70	"A1=user:$ZFS_ACL_STAFF1:write_data:deny" \
71	"A1=group:$ZFS_ACL_STAFF_GROUP:write_data:deny"
72
73log_note "Create second zfs file system to restore the cpio archive."
74log_must zfs create $TESTPOOL/$TESTFS1
75log_must zfs set mountpoint=$TESTDIR1 $TESTPOOL/$TESTFS1
76log_must chmod 777 $TESTDIR1
77
78# Define test fine and record the original directory.
79CPIOFILE=cpiofile.$$
80file=$TESTFILE0
81dir=dir.$$
82orig_dir=$PWD
83
84typeset user
85for user in root $ZFS_ACL_STAFF1; do
86	# Set the current user
87	log_must set_cur_usr $user
88
89	typeset -i i=0
90	while (( i < ${#ops[*]} )); do
91		log_note "Create file $file and directory $dir " \
92			"in zfs filesystem. "
93		cd $TESTDIR
94		log_must usr_exec touch $file
95		log_must usr_exec mkdir $dir
96
97		log_note "Change the ACLs of file and directory with " \
98			"'chmod ${ops[i]}'."
99		for obj in $file $dir; do
100			log_must usr_exec chmod ${ops[i]} $obj
101		done
102
103		log_note "Archive the file and directory."
104		cd $TESTDIR
105		log_must eval "usr_exec ls | " \
106			"usr_exec cpio -ocP -O $CPIOFILE > /dev/null 2>&1"
107
108		log_note "Restore the cpio archive."
109		log_must usr_exec mv $CPIOFILE $TESTDIR1
110		cd $TESTDIR1
111		log_must eval "usr_exec cat $CPIOFILE | " \
112			"usr_exec cpio -icP > /dev/null 2>&1"
113
114		log_note "Verify that the ACLs of restored file/directory " \
115			"have no changes."
116		for obj in $file $dir; do
117			log_must compare_modes $TESTDIR/$obj $TESTDIR1/$obj
118			log_must compare_acls $TESTDIR/$obj $TESTDIR1/$obj
119		done
120
121		log_must usr_exec rm -rf $TESTDIR/* $TESTDIR1/*
122
123		(( i = i + 1 ))
124	done
125done
126
127log_pass "'cpio' command succeeds to support ZFS ACLs."
128