zfs/tests/zfs-tests
Attila Fülöp 211ec1b9fd
Deny receiving into encrypted datasets if the keys are not loaded
Commit 68ddc06b61 introduced support
for receiving unencrypted datasets as children of encrypted ones but
unfortunately got the logic upside down. This resulted in failing to
deny receives of incremental sends into encrypted datasets without
their keys loaded. If receiving a filesystem, the receive was done
into a newly created unencrypted child dataset of the target. In
case of volumes the receive made the target volume undeletable since
a dataset was created below it, which we obviously can't handle.
Incremental streams with embedded blocks are affected as well.

We fix the broken logic to properly deny receives in such cases.

Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Attila Fülöp <attila@fueloep.org>
Closes #13598
Closes #14055
Closes #14119
2022-11-03 09:55:13 -07:00
..
callbacks autoconf: use include directives instead of recursing down tests (mostly) 2022-05-10 10:20:09 -07:00
cmd Fix TOCTOU race conditions reported by CodeQL and Coverity 2022-10-29 13:04:10 -07:00
include zfs_rename: support RENAME_* flags 2022-10-28 09:49:20 -07:00
tests Deny receiving into encrypted datasets if the keys are not loaded 2022-11-03 09:55:13 -07:00
.gitignore autoconf: use include directives instead of recursing down cmd 2022-05-10 10:18:38 -07:00
Makefile.am autoconf: use include directives instead of recursing down tests (mostly) 2022-05-10 10:20:09 -07:00