384 is set to \fBlegacy\fR, \fBZFS\fR makes no attempt to manage the file system,
385 and the administrator is responsible for mounting and unmounting the file
386 system.
387 .SS "Zones"
388 .sp
389 .LP
390 A \fBZFS\fR file system can be added to a non-global zone by using the
391 \fBzonecfg\fR \fBadd fs\fR subcommand. A \fBZFS\fR file system that is added to
392 a non-global zone must have its \fBmountpoint\fR property set to \fBlegacy\fR.
393 .sp
394 .LP
395 The physical properties of an added file system are controlled by the global
396 administrator. However, the zone administrator can create, modify, or destroy
397 files within the added file system, depending on how the file system is
398 mounted.
399 .sp
400 .LP
401 A dataset can also be delegated to a non-global zone by using the \fBzonecfg\fR
402 \fBadd dataset\fR subcommand. You cannot delegate a dataset to one zone and the
403 children of the same dataset to another zone. The zone administrator can change
404 properties of the dataset or any of its children. However, the \fBquota\fR
405 property is controlled by the global administrator.
406 .sp
407 .LP
408 A \fBZFS\fR volume can be added as a device to a non-global zone by using the
409 \fBzonecfg\fR \fBadd device\fR subcommand. However, its physical properties can
410 be modified only by the global administrator.
411 .sp
412 .LP
413 For more information about \fBzonecfg\fR syntax, see \fBzonecfg\fR(1M).
414 .sp
415 .LP
416 After a dataset is delegated to a non-global zone, the \fBzoned\fR property is
417 automatically set. A zoned file system cannot be mounted in the global zone,
418 since the zone administrator might have to set the mount point to an
419 unacceptable value.
420 .sp
421 .LP
422 The global administrator can forcibly clear the \fBzoned\fR property, though
423 this should be done with extreme care. The global administrator should verify
424 that all the mount points are acceptable before clearing the property.
425 .SS "Native Properties"
951 .sp .6
952 .RS 4n
953 Controls whether device nodes can be opened on this file system. The default
954 value is \fBon\fR.
955 .RE
956
957 .sp
958 .ne 2
959 .na
960 \fB\fBexec\fR=\fBon\fR | \fBoff\fR\fR
961 .ad
962 .sp .6
963 .RS 4n
964 Controls whether processes can be executed from within this file system. The
965 default value is \fBon\fR.
966 .RE
967
968 .sp
969 .ne 2
970 .na
971 \fB\fBmountpoint\fR=\fIpath\fR | \fBnone\fR | \fBlegacy\fR\fR
972 .ad
973 .sp .6
974 .RS 4n
975 Controls the mount point used for this file system. See the "Mount Points"
976 section for more information on how this property is used.
977 .sp
978 When the \fBmountpoint\fR property is changed for a file system, the file
979 system and any children that inherit the mount point are unmounted. If the new
980 value is \fBlegacy\fR, then they remain unmounted. Otherwise, they are
981 automatically remounted in the new location if the property was previously
982 \fBlegacy\fR or \fBnone\fR, or if they were mounted before the property was
983 changed. In addition, any shared file systems are unshared and shared in the
984 new location.
985 .RE
986
987 .sp
988 .ne 2
989 .na
990 \fB\fBnbmand\fR=\fBon\fR | \fBoff\fR\fR
1014 .sp
1015 .ne 2
1016 .na
1017 \fB\fBquota\fR=\fIsize\fR | \fBnone\fR\fR
1018 .ad
1019 .sp .6
1020 .RS 4n
1021 Limits the amount of space a dataset and its descendents can consume. This
1022 property enforces a hard limit on the amount of space used. This includes all
1023 space consumed by descendents, including file systems and snapshots. Setting a
1024 quota on a descendent of a dataset that already has a quota does not override
1025 the ancestor's quota, but rather imposes an additional limit.
1026 .sp
1027 Quotas cannot be set on volumes, as the \fBvolsize\fR property acts as an
1028 implicit quota.
1029 .RE
1030
1031 .sp
1032 .ne 2
1033 .na
1034 \fB\fBuserquota@\fR\fIuser\fR=\fIsize\fR | \fBnone\fR\fR
1035 .ad
1036 .sp .6
1037 .RS 4n
1038 Limits the amount of space consumed by the specified user. User space
1039 consumption is identified by the \fBuserspace@\fR\fIuser\fR property.
1040 .sp
1041 Enforcement of user quotas may be delayed by several seconds. This delay means
1042 that a user might exceed their quota before the system notices that they are
1043 over quota and begins to refuse additional writes with the \fBEDQUOT\fR error
1044 message . See the \fBzfs userspace\fR subcommand for more information.
1045 .sp
1046 Unprivileged users can only access their own groups' space usage. The root
1047 user, or a user who has been granted the \fBuserquota\fR privilege with \fBzfs
1048 allow\fR, can get and set everyone's quota.
1049 .sp
1050 This property is not available on volumes, on file systems before version 4, or
1051 on pools before version 15. The \fBuserquota@\fR... properties are not
1052 displayed by \fBzfs get all\fR. The user's name must be appended after the
1053 \fB@\fR symbol, using one of the following forms:
3110 send subcommand
3111 share subcommand Allows sharing file systems over NFS or SMB
3112 protocols
3113 snapshot subcommand Must also have the 'mount' ability
3114 groupquota other Allows accessing any groupquota@... property
3115 groupused other Allows reading any groupused@... property
3116 userprop other Allows changing any user property
3117 userquota other Allows accessing any userquota@... property
3118 userused other Allows reading any userused@... property
3119
3120 aclinherit property
3121 aclmode property
3122 atime property
3123 canmount property
3124 casesensitivity property
3125 checksum property
3126 compression property
3127 copies property
3128 devices property
3129 exec property
3130 mountpoint property
3131 nbmand property
3132 normalization property
3133 primarycache property
3134 quota property
3135 readonly property
3136 recordsize property
3137 refquota property
3138 refreservation property
3139 reservation property
3140 secondarycache property
3141 setuid property
3142 shareiscsi property
3143 sharenfs property
3144 sharesmb property
3145 snapdir property
3146 utf8only property
3147 version property
3148 volblocksize property
3149 volsize property
3150 vscan property
3151 xattr property
3152 zoned property
3153 .fi
3154 .in -2
3155 .sp
3156
3157 .sp
3158 .ne 2
3159 .na
3160 \fB\fBzfs allow\fR \fB-c\fR \fIperm\fR|@\fIsetname\fR[,...]
3161 \fIfilesystem\fR|\fIvolume\fR\fR
3162 .ad
3163 .sp .6
3164 .RS 4n
3165 Sets "create time" permissions. These permissions are granted (locally) to the
|
384 is set to \fBlegacy\fR, \fBZFS\fR makes no attempt to manage the file system,
385 and the administrator is responsible for mounting and unmounting the file
386 system.
387 .SS "Zones"
388 .sp
389 .LP
390 A \fBZFS\fR file system can be added to a non-global zone by using the
391 \fBzonecfg\fR \fBadd fs\fR subcommand. A \fBZFS\fR file system that is added to
392 a non-global zone must have its \fBmountpoint\fR property set to \fBlegacy\fR.
393 .sp
394 .LP
395 The physical properties of an added file system are controlled by the global
396 administrator. However, the zone administrator can create, modify, or destroy
397 files within the added file system, depending on how the file system is
398 mounted.
399 .sp
400 .LP
401 A dataset can also be delegated to a non-global zone by using the \fBzonecfg\fR
402 \fBadd dataset\fR subcommand. You cannot delegate a dataset to one zone and the
403 children of the same dataset to another zone. The zone administrator can change
404 properties of the dataset or any of its children. However, the \fBquota\fR,
405 \fBfilesystem_limit\fR and \fBsnapshot_limit\fR properties of the delegated
406 dataset can only be set from the global zone.
407 .sp
408 .LP
409 A \fBZFS\fR volume can be added as a device to a non-global zone by using the
410 \fBzonecfg\fR \fBadd device\fR subcommand. However, its physical properties can
411 be modified only by the global administrator.
412 .sp
413 .LP
414 For more information about \fBzonecfg\fR syntax, see \fBzonecfg\fR(1M).
415 .sp
416 .LP
417 After a dataset is delegated to a non-global zone, the \fBzoned\fR property is
418 automatically set. A zoned file system cannot be mounted in the global zone,
419 since the zone administrator might have to set the mount point to an
420 unacceptable value.
421 .sp
422 .LP
423 The global administrator can forcibly clear the \fBzoned\fR property, though
424 this should be done with extreme care. The global administrator should verify
425 that all the mount points are acceptable before clearing the property.
426 .SS "Native Properties"
952 .sp .6
953 .RS 4n
954 Controls whether device nodes can be opened on this file system. The default
955 value is \fBon\fR.
956 .RE
957
958 .sp
959 .ne 2
960 .na
961 \fB\fBexec\fR=\fBon\fR | \fBoff\fR\fR
962 .ad
963 .sp .6
964 .RS 4n
965 Controls whether processes can be executed from within this file system. The
966 default value is \fBon\fR.
967 .RE
968
969 .sp
970 .ne 2
971 .na
972 \fB\fBfilesystem_limit\fR=\fIcount\fR | \fBnone\fR\fR
973 .ad
974 .sp .6
975 .RS 4n
976 Limits the number of filesystems and volumes that can exist at this point in
977 the dataset tree. The count of nested filesystems and volumes includes the
978 filesystem on which the limit is set, thus the minimum value is 1. The limit is
979 not enforced if the user is allowed to change the limit. Setting a
980 filesystem_limit on a descendent of a filesystem that already has a
981 filesystem_limit does not override the ancestor's filesystem_limit, but rather
982 imposes an additional limit. This feature must be enabled to be used
983 (see \fBzpool-features\fR(5)).
984 .RE
985 .sp
986 .ne 2
987 .na
988 \fB\fBmountpoint\fR=\fIpath\fR | \fBnone\fR | \fBlegacy\fR\fR
989 .ad
990 .sp .6
991 .RS 4n
992 Controls the mount point used for this file system. See the "Mount Points"
993 section for more information on how this property is used.
994 .sp
995 When the \fBmountpoint\fR property is changed for a file system, the file
996 system and any children that inherit the mount point are unmounted. If the new
997 value is \fBlegacy\fR, then they remain unmounted. Otherwise, they are
998 automatically remounted in the new location if the property was previously
999 \fBlegacy\fR or \fBnone\fR, or if they were mounted before the property was
1000 changed. In addition, any shared file systems are unshared and shared in the
1001 new location.
1002 .RE
1003
1004 .sp
1005 .ne 2
1006 .na
1007 \fB\fBnbmand\fR=\fBon\fR | \fBoff\fR\fR
1031 .sp
1032 .ne 2
1033 .na
1034 \fB\fBquota\fR=\fIsize\fR | \fBnone\fR\fR
1035 .ad
1036 .sp .6
1037 .RS 4n
1038 Limits the amount of space a dataset and its descendents can consume. This
1039 property enforces a hard limit on the amount of space used. This includes all
1040 space consumed by descendents, including file systems and snapshots. Setting a
1041 quota on a descendent of a dataset that already has a quota does not override
1042 the ancestor's quota, but rather imposes an additional limit.
1043 .sp
1044 Quotas cannot be set on volumes, as the \fBvolsize\fR property acts as an
1045 implicit quota.
1046 .RE
1047
1048 .sp
1049 .ne 2
1050 .na
1051 \fB\fBsnapshot_limit\fR=\fIcount\fR | \fBnone\fR\fR
1052 .ad
1053 .sp .6
1054 .RS 4n
1055 Limits the number of snapshots that can be created on a dataset and its
1056 descendents. Setting a snapshot_limit on a descendent of a dataset that already
1057 has a snapshot_limit does not override the ancestor's snapshot_limit, but
1058 rather imposes an additional limit. The limit is not enforced if the user is
1059 allowed to change the limit. This means that recursive snapshots taken from the
1060 global zone are counted against each delegated dataset. This feature must be
1061 enabled to be used (see \fBzpool-features\fR(5)).
1062 .RE
1063
1064 .sp
1065 .ne 2
1066 .na
1067 \fB\fBuserquota@\fR\fIuser\fR=\fIsize\fR | \fBnone\fR\fR
1068 .ad
1069 .sp .6
1070 .RS 4n
1071 Limits the amount of space consumed by the specified user. User space
1072 consumption is identified by the \fBuserspace@\fR\fIuser\fR property.
1073 .sp
1074 Enforcement of user quotas may be delayed by several seconds. This delay means
1075 that a user might exceed their quota before the system notices that they are
1076 over quota and begins to refuse additional writes with the \fBEDQUOT\fR error
1077 message . See the \fBzfs userspace\fR subcommand for more information.
1078 .sp
1079 Unprivileged users can only access their own groups' space usage. The root
1080 user, or a user who has been granted the \fBuserquota\fR privilege with \fBzfs
1081 allow\fR, can get and set everyone's quota.
1082 .sp
1083 This property is not available on volumes, on file systems before version 4, or
1084 on pools before version 15. The \fBuserquota@\fR... properties are not
1085 displayed by \fBzfs get all\fR. The user's name must be appended after the
1086 \fB@\fR symbol, using one of the following forms:
3143 send subcommand
3144 share subcommand Allows sharing file systems over NFS or SMB
3145 protocols
3146 snapshot subcommand Must also have the 'mount' ability
3147 groupquota other Allows accessing any groupquota@... property
3148 groupused other Allows reading any groupused@... property
3149 userprop other Allows changing any user property
3150 userquota other Allows accessing any userquota@... property
3151 userused other Allows reading any userused@... property
3152
3153 aclinherit property
3154 aclmode property
3155 atime property
3156 canmount property
3157 casesensitivity property
3158 checksum property
3159 compression property
3160 copies property
3161 devices property
3162 exec property
3163 filesystem_limit property
3164 mountpoint property
3165 nbmand property
3166 normalization property
3167 primarycache property
3168 quota property
3169 readonly property
3170 recordsize property
3171 refquota property
3172 refreservation property
3173 reservation property
3174 secondarycache property
3175 setuid property
3176 shareiscsi property
3177 sharenfs property
3178 sharesmb property
3179 snapdir property
3180 snapshot_limit property
3181 utf8only property
3182 version property
3183 volblocksize property
3184 volsize property
3185 vscan property
3186 xattr property
3187 zoned property
3188 .fi
3189 .in -2
3190 .sp
3191
3192 .sp
3193 .ne 2
3194 .na
3195 \fB\fBzfs allow\fR \fB-c\fR \fIperm\fR|@\fIsetname\fR[,...]
3196 \fIfilesystem\fR|\fIvolume\fR\fR
3197 .ad
3198 .sp .6
3199 .RS 4n
3200 Sets "create time" permissions. These permissions are granted (locally) to the
|