OpenZFS zfs-2.2.11

zfs-2.2.11Linux
Added 2
  • Add workaround for device_access ZTS test
  • Add 'capsh' to commands.cfg
Changed 11
  • vdev_disk: use calling cred to check for device access
  • vdev_file: use calling cred to check for device access
  • zfs_file_open: add cred arg, use it to check access
  • vdev_open: pass credential to check for permission to open device
  • secpolicy_zfs: add a note about the power of CAP_SYS_ADMIN
  • secpolicy_sys_config: only permit a global zone credential
Fixed 2
  • Fix aarch64 build failure by removing earlyclobber
  • zpl_sync_fs: work around kernels that ignore sync_fs errors
Removed 1
  • secpolicy_nfs: remove, not used

From OpenZFS

Supported Platforms
  • Linux: compatible with 4.18 - 6.17 kernels
  • FreeBSD: compatible with releases starting from 13.3+, 14.0+
Changes
  • [zfs-2.2.11] Add workaround for device_access ZTS test
  • [zfs-2.2.11] Add 'capsh' to commands.cfg
  • ZTS: device access tests #18960
  • vdev_disk: use calling cred to check for device access #18960
  • vdev_file: use calling cred to check for device access #18960
  • zfs_file_open: add cred arg, use it to check access #18960
  • vdev_open: pass credential to check for permission to open device #18960
  • secpolicy_zfs: add a note about the power of CAP_SYS_ADMIN #18959
  • secpolicy_sys_config: only permit a global zone credential #18959
  • secpolicy_zinject: only permit a global zone credential #18959
  • secpolicy_nfs: remove, not used #18959
  • ZTS: test secpolicy_zinject correctly limits namespace access #18959
  • ZTS: test secpolicy_sys_config correctly limits namespace access #18959
  • config: detect idmap method via generic_permission test #18769
  • libzfs: fallback VDEV_UPATH to VDEV_PATH for non-DM devices #18439 #18802
  • CodeQL: Flag implicit compare-then-assign in branch conditions #18899
  • CI: don't fail a passing job when a log reader has already exited #18885
  • CI: publish the per-VM test counter atomically #18885
  • CI: Update Alpine Linux runner to 3.24.1 #18790
  • Remove libuutil from the pull request template and fix headings #18791
  • CI: Fix race caused by shared ctr file updates #18778
  • Using net/cloud-init to unpin specific python #18717
  • CI: Increase default watchdog NMI timeout on Linux #18704
  • CI: Re-allow workflow_dispatch on zfs-qemu #18680
  • Update our CI runners to the newest FreeBSD 15.1 RELEASE (#18667)
  • CI: Have zfs-build-packages workflow build tarballs on Alma (#18662)
  • zts: test syncfs() behaviour when pool suspends #17420
  • zpl_sync_fs: work around kernels that ignore sync_fs errors #17420
  • zfs_sync: return error when pool suspends #17420
  • zfs_sync: remove support for impossible scenarios #17420
  • Fix aarch64 build failure by removing earlyclobber (#18532)
View original

Upgraded? How did it go?

Discussion