]> git.proxmox.com Git - mirror_zfs.git/commit - module/zfs/dsl_crypt.c
Allow unencrypted children of encrypted datasets
authorTom Caputi <tcaputi@datto.com>
Thu, 20 Jun 2019 19:29:51 +0000 (15:29 -0400)
committerBrian Behlendorf <behlendorf1@llnl.gov>
Thu, 20 Jun 2019 19:29:51 +0000 (12:29 -0700)
commitda68988708d6e38457ce965103d001e8aa965885
tree59041f5508852cb5b3bd3a565003596090444a8c
parent84b4201f3202fb6bf6beed7a27abf38292f67b41
Allow unencrypted children of encrypted datasets

When encryption was first added to ZFS, we made a decision to
prevent users from creating unencrypted children of encrypted
datasets. The idea was to prevent users from inadvertently
leaving some of their data unencrypted. However, since the
release of 0.8.0, some legitimate reasons have been brought up
for this behavior to be allowed. This patch simply removes this
limitation from all code paths that had checks for it and updates
the tests accordingly.

Reviewed-by: Jason King <jason.king@joyent.com>
Reviewed-by: Sean Eric Fagan <sef@ixsystems.com>
Reviewed-by: Richard Laager <rlaager@wiktel.com>
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Tom Caputi <tcaputi@datto.com>
Closes #8737
Closes #8870
include/sys/dsl_crypt.h
lib/libzfs/libzfs_crypto.c
lib/libzfs/libzfs_dataset.c
lib/libzfs/libzfs_sendrecv.c
module/zfs/dmu_objset.c
module/zfs/dmu_recv.c
module/zfs/dsl_crypt.c
tests/zfs-tests/tests/functional/cli_root/zfs_create/zfs_create_encrypted.ksh
tests/zfs-tests/tests/functional/cli_root/zfs_receive/zfs_receive_to_encrypted.ksh
tests/zfs-tests/tests/functional/cli_root/zfs_rename/zfs_rename_to_encrypted.ksh