1d583b39bSJohn Wren Kennedy#!/bin/ksh -p 2d583b39bSJohn Wren Kennedy# 3d583b39bSJohn Wren Kennedy# CDDL HEADER START 4d583b39bSJohn Wren Kennedy# 5d583b39bSJohn Wren Kennedy# The contents of this file are subject to the terms of the 6d583b39bSJohn Wren Kennedy# Common Development and Distribution License (the "License"). 7d583b39bSJohn Wren Kennedy# You may not use this file except in compliance with the License. 8d583b39bSJohn Wren Kennedy# 9d583b39bSJohn Wren Kennedy# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 10d583b39bSJohn Wren Kennedy# or http://www.opensolaris.org/os/licensing. 11d583b39bSJohn Wren Kennedy# See the License for the specific language governing permissions 12d583b39bSJohn Wren Kennedy# and limitations under the License. 13d583b39bSJohn Wren Kennedy# 14d583b39bSJohn Wren Kennedy# When distributing Covered Code, include this CDDL HEADER in each 15d583b39bSJohn Wren Kennedy# file and include the License file at usr/src/OPENSOLARIS.LICENSE. 16d583b39bSJohn Wren Kennedy# If applicable, add the following below this CDDL HEADER, with the 17d583b39bSJohn Wren Kennedy# fields enclosed by brackets "[]" replaced with your own identifying 18d583b39bSJohn Wren Kennedy# information: Portions Copyright [yyyy] [name of copyright owner] 19d583b39bSJohn Wren Kennedy# 20d583b39bSJohn Wren Kennedy# CDDL HEADER END 21d583b39bSJohn Wren Kennedy# 22d583b39bSJohn Wren Kennedy 23d583b39bSJohn Wren Kennedy# 24d583b39bSJohn Wren Kennedy# Copyright 2007 Sun Microsystems, Inc. All rights reserved. 25d583b39bSJohn Wren Kennedy# Use is subject to license terms. 26d583b39bSJohn Wren Kennedy# 27d583b39bSJohn Wren Kennedy# Copyright (c) 2012 by Marcelo Leal. All rights reserved. 28d583b39bSJohn Wren Kennedy# 29*1d32ba66SJohn Wren Kennedy 30*1d32ba66SJohn Wren Kennedy# 31*1d32ba66SJohn Wren Kennedy# Copyright (c) 2016 by Delphix. All rights reserved. 32*1d32ba66SJohn Wren Kennedy# 33*1d32ba66SJohn Wren Kennedy 34d583b39bSJohn Wren Kennedy. $STF_SUITE/tests/functional/acl/acl_common.kshlib 35d583b39bSJohn Wren Kennedy 36d583b39bSJohn Wren Kennedy# 37d583b39bSJohn Wren Kennedy# DESCRIPTION: 38*1d32ba66SJohn Wren Kennedy# Verify that 'cpio' command with -P option supports to archive ZFS ACLs 39d583b39bSJohn Wren Kennedy# 40d583b39bSJohn Wren Kennedy# STRATEGY: 41d583b39bSJohn Wren Kennedy# 1. Create file and directory in zfs filesystem 42d583b39bSJohn Wren Kennedy# 2. Add new ACE in ACL or change mode of file and directory 43*1d32ba66SJohn Wren Kennedy# 3. Use cpio to archive file and directory 44d583b39bSJohn Wren Kennedy# 4. Extract the archive file 45d583b39bSJohn Wren Kennedy# 5. Verify that the restored ACLs of file and directory identify 46d583b39bSJohn Wren Kennedy# with the origional ones. 47d583b39bSJohn Wren Kennedy# 48d583b39bSJohn Wren Kennedy 49d583b39bSJohn Wren Kennedyverify_runnable "both" 50d583b39bSJohn Wren Kennedy 51d583b39bSJohn Wren Kennedyfunction cleanup 52d583b39bSJohn Wren Kennedy{ 53d583b39bSJohn Wren Kennedy if datasetexists $TESTPOOL/$TESTFS1; then 54*1d32ba66SJohn Wren Kennedy log_must zfs destroy -f $TESTPOOL/$TESTFS1 55d583b39bSJohn Wren Kennedy fi 56d583b39bSJohn Wren Kennedy if (( ${#orig_dir} != 0 )); then 57d583b39bSJohn Wren Kennedy cd $orig_dir 58d583b39bSJohn Wren Kennedy fi 59*1d32ba66SJohn Wren Kennedy [[ -d $TESTDIR1 ]] && log_must rm -rf $TESTDIR1 60*1d32ba66SJohn Wren Kennedy [[ -d $TESTDIR ]] && log_must rm -rf $TESTDIR/* 61d583b39bSJohn Wren Kennedy} 62d583b39bSJohn Wren Kennedy 63*1d32ba66SJohn Wren Kennedylog_assert "Verify that 'cpio' command supports to archive ZFS ACLs." 64d583b39bSJohn Wren Kennedylog_onexit cleanup 65d583b39bSJohn Wren Kennedy 66d583b39bSJohn Wren Kennedyset -A ops "A+user:$ZFS_ACL_OTHER1:execute:allow" \ 67d583b39bSJohn Wren Kennedy "A3+user:$ZFS_ACL_OTHER1:write_data:deny" \ 68d583b39bSJohn Wren Kennedy "A0+user:$ZFS_ACL_OTHER1:write_data:deny" \ 69d583b39bSJohn Wren Kennedy "A3+group:$ZFS_ACL_OTHER_GROUP:read_data:deny" \ 70d583b39bSJohn Wren Kennedy "A1=user:$ZFS_ACL_STAFF1:write_data:deny" \ 71d583b39bSJohn Wren Kennedy "A1=group:$ZFS_ACL_STAFF_GROUP:write_data:deny" 72d583b39bSJohn Wren Kennedy 73d583b39bSJohn Wren Kennedylog_note "Create second zfs file system to restore the cpio archive." 74*1d32ba66SJohn Wren Kennedylog_must zfs create $TESTPOOL/$TESTFS1 75*1d32ba66SJohn Wren Kennedylog_must zfs set mountpoint=$TESTDIR1 $TESTPOOL/$TESTFS1 76*1d32ba66SJohn Wren Kennedylog_must chmod 777 $TESTDIR1 77d583b39bSJohn Wren Kennedy 78d583b39bSJohn Wren Kennedy# Define test fine and record the original directory. 79d583b39bSJohn Wren KennedyCPIOFILE=cpiofile.$$ 80d583b39bSJohn Wren Kennedyfile=$TESTFILE0 81d583b39bSJohn Wren Kennedydir=dir.$$ 82d583b39bSJohn Wren Kennedyorig_dir=$PWD 83d583b39bSJohn Wren Kennedy 84d583b39bSJohn Wren Kennedytypeset user 85d583b39bSJohn Wren Kennedyfor user in root $ZFS_ACL_STAFF1; do 86d583b39bSJohn Wren Kennedy # Set the current user 87d583b39bSJohn Wren Kennedy log_must set_cur_usr $user 88d583b39bSJohn Wren Kennedy 89d583b39bSJohn Wren Kennedy typeset -i i=0 90d583b39bSJohn Wren Kennedy while (( i < ${#ops[*]} )); do 91d583b39bSJohn Wren Kennedy log_note "Create file $file and directory $dir " \ 92d583b39bSJohn Wren Kennedy "in zfs filesystem. " 93d583b39bSJohn Wren Kennedy cd $TESTDIR 94*1d32ba66SJohn Wren Kennedy log_must usr_exec touch $file 95*1d32ba66SJohn Wren Kennedy log_must usr_exec mkdir $dir 96d583b39bSJohn Wren Kennedy 97d583b39bSJohn Wren Kennedy log_note "Change the ACLs of file and directory with " \ 98*1d32ba66SJohn Wren Kennedy "'chmod ${ops[i]}'." 99d583b39bSJohn Wren Kennedy for obj in $file $dir; do 100*1d32ba66SJohn Wren Kennedy log_must usr_exec chmod ${ops[i]} $obj 101d583b39bSJohn Wren Kennedy done 102d583b39bSJohn Wren Kennedy 103d583b39bSJohn Wren Kennedy log_note "Archive the file and directory." 104d583b39bSJohn Wren Kennedy cd $TESTDIR 105*1d32ba66SJohn Wren Kennedy log_must eval "usr_exec ls | " \ 106*1d32ba66SJohn Wren Kennedy "usr_exec cpio -ocP -O $CPIOFILE > /dev/null 2>&1" 107d583b39bSJohn Wren Kennedy 108d583b39bSJohn Wren Kennedy log_note "Restore the cpio archive." 109*1d32ba66SJohn Wren Kennedy log_must usr_exec mv $CPIOFILE $TESTDIR1 110d583b39bSJohn Wren Kennedy cd $TESTDIR1 111*1d32ba66SJohn Wren Kennedy log_must eval "usr_exec cat $CPIOFILE | " \ 112*1d32ba66SJohn Wren Kennedy "usr_exec cpio -icP > /dev/null 2>&1" 113d583b39bSJohn Wren Kennedy 114d583b39bSJohn Wren Kennedy log_note "Verify that the ACLs of restored file/directory " \ 115d583b39bSJohn Wren Kennedy "have no changes." 116d583b39bSJohn Wren Kennedy for obj in $file $dir; do 117d583b39bSJohn Wren Kennedy log_must compare_modes $TESTDIR/$obj $TESTDIR1/$obj 118d583b39bSJohn Wren Kennedy log_must compare_acls $TESTDIR/$obj $TESTDIR1/$obj 119d583b39bSJohn Wren Kennedy done 120d583b39bSJohn Wren Kennedy 121*1d32ba66SJohn Wren Kennedy log_must usr_exec rm -rf $TESTDIR/* $TESTDIR1/* 122d583b39bSJohn Wren Kennedy 123d583b39bSJohn Wren Kennedy (( i = i + 1 )) 124d583b39bSJohn Wren Kennedy done 125d583b39bSJohn Wren Kennedydone 126d583b39bSJohn Wren Kennedy 127*1d32ba66SJohn Wren Kennedylog_pass "'cpio' command succeeds to support ZFS ACLs." 128