Scale 22.12.1 - Locking and Unlocking a dataset resets its Share ACL
Description
Problem/Justification
None
Impact
None
Activity
Show:

Bug Clerk March 10, 2023 at 7:11 PM
22.12.2 PR: https://github.com/truenas/middleware/pull/10846

Automation for Jira March 10, 2023 at 7:10 PM
This issue has now been closed. Comments made after this point may not be viewed by the TrueNAS Teams. Please open a new issue if you have found a problem or need to re-engage with the TrueNAS Engineering Teams.

Bug Clerk March 10, 2023 at 5:01 PM

Automation for Jira March 1, 2023 at 2:50 AM
Thank you for submitting this TrueNAS Bug Report! So that we can quickly investigate your issue, please attach a Debug file and any other information related to this issue through our secure and private upload service below. Debug files can be generated in the UI by navigating to System -> Advanced -> Save Debug.
https://ixsystems.atlassian.net/servicedesk/customer/portal/15/group/37/create/153
Complete
Pinned fields
Click on the next to a field label to start pinning.
Details
Details
Assignee

Reporter

Impact
Low
Components
Fix versions
Affects versions
Priority
More fields
Time tracking
More fields
Time trackingKatalon Platform
Linked Test Cases, Katalon Defect Results, Katalon Studio Test Results
Katalon Platform
Linked Test Cases, Katalon Defect Results, Katalon Studio Test Results
Created March 1, 2023 at 2:50 AM
Updated February 27, 2025 at 9:41 PM
Resolved March 10, 2023 at 7:12 PM
I have an encrypted Dataset with an associated SMB Share with Access Based Share Enumeration enabled.
I've set the Share ACL to limit visibility when the dataset is unlocked.
All works well until I lock and (subsequently) unlock the dataset.
After unlocking the dataset the Share ACL is reset back to the default (S-1-1-0) (allowed everyone) making the dataset name visible to all on the network.
Easily recreated by creating an encrypted dataset (with passphrase); creating an associated share; edit the Share ACL (e.g. add “some user” “full” “deny”); lock and unlock the dataset; check Share - will be set back to S-1-1-0 and all prior changes lost.
It's not a major issue, as the Filesystem ACL still prevents anyone from opening or browsing the contents.