OS-1566 filesystem limits for ZFS datasets

*** 399,410 ****
  .sp
  .LP
  A dataset can also be delegated to a non-global zone by using the \fBzonecfg\fR
  \fBadd dataset\fR subcommand. You cannot delegate a dataset to one zone and the
  children of the same dataset to another zone. The zone administrator can change
! properties of the dataset or any of its children. However, the \fBquota\fR
! property is controlled by the global administrator.
  .sp
  .LP
  A \fBZFS\fR volume can be added as a device to a non-global zone by using the
  \fBzonecfg\fR \fBadd device\fR subcommand. However, its physical properties can
  be modified only by the global administrator.
--- 399,411 ----
  .sp
  .LP
  A dataset can also be delegated to a non-global zone by using the \fBzonecfg\fR
  \fBadd dataset\fR subcommand. You cannot delegate a dataset to one zone and the
  children of the same dataset to another zone. The zone administrator can change
! properties of the dataset or any of its children. However, the \fBquota\fR,
! \fBfilesystem_limit\fR and \fBsnapshot_limit\fR properties are controlled by the
! global administrator.
  .sp
  .LP
  A \fBZFS\fR volume can be added as a device to a non-global zone by using the
  \fBzonecfg\fR \fBadd device\fR subcommand. However, its physical properties can
  be modified only by the global administrator.
*** 966,975 ****
--- 967,991 ----
  .RE
  
  .sp
  .ne 2
  .na
+ \fB\fBfilesystem_limit\fR=\fIcount\fR | \fBnone\fR\fR
+ .ad
+ .sp .6
+ .RS 4n
+ Limits the number of filesystems that can exist at this point in the filesystem
+ tree. The count of nested filesystems includes the filesystem on which the
+ limit is set, thus the minimum value is 1. The limit is not enforced in the
+ global zone. Setting a filesystem_limit on a descendent of a filesystem that
+ already has a filesystem_limit does not override the ancestor's
+ filesystem_limit, but rather imposes an additional limit. This feature must be
+ enabled to be used (see \fBzpool-features\fR(5)).
+ .RE
+ .sp
+ .ne 2
+ .na
  \fB\fBmountpoint\fR=\fIpath\fR | \fBnone\fR | \fBlegacy\fR\fR
  .ad
  .sp .6
  .RS 4n
  Controls the mount point used for this file system. See the "Mount Points"
*** 1029,1038 ****
--- 1045,1069 ----
  .RE
  
  .sp
  .ne 2
  .na
+ \fB\fBsnapshot_limit\fR=\fIcount\fR | \fBnone\fR\fR
+ .ad
+ .sp .6
+ .RS 4n
+ Limits the number of snapshots that can be created on a dataset and its
+ descendents. Setting a snapshot_limit on a descendent of a dataset that already
+ has a snapshot_limit does not override the ancestor's snapshot_limit, but
+ rather imposes an additional limit. The limit is not enforced in the global
+ zone, but recursive snapshots taken from the global zone are counted on each
+ dataset. This feature must be enabled to be used (see \fBzpool-features\fR(5)).
+ .RE
+ 
+ .sp
+ .ne 2
+ .na
  \fB\fBuserquota@\fR\fIuser\fR=\fIsize\fR | \fBnone\fR\fR
  .ad
  .sp .6
  .RS 4n
  Limits the amount of space consumed by the specified user. User space
*** 3125,3134 ****
--- 3156,3166 ----
  checksum         property
  compression      property
  copies           property
  devices          property
  exec             property
+ filesystem_limit property
  mountpoint       property
  nbmand           property
  normalization    property
  primarycache     property
  quota            property
*** 3141,3150 ****
--- 3173,3183 ----
  setuid           property
  shareiscsi       property
  sharenfs         property
  sharesmb         property
  snapdir          property
+ snapshot_limit   property
  utf8only         property
  version          property
  volblocksize     property
  volsize          property
  vscan            property