[Pkg-zfsonlinux-devel] Bug#1028613: Bug#1028613: libpam-zfs: zfs_umount failed on closing ssh session

[Aron Xu]

Hi,

On Sat, Jan 6, 2024 at 1:27 AM 陈 晟祺 <harry-chen at outlook.com> wrote:
>
>
> You may want to try (as workaround):
>
> 1. skip pam_zfs_key when pam_systemd is used, as #12430 suggests; or,
> 2. use `zfs allow` to grant `mount` permission to yourself.
>

I'd like to mention that zfs-allow cannot grant mount/umount
permission on Linux as stated in zfs-allow(8):
       Delegations are supported under Linux with the exception of
       mount, unmount, mountpoint, canmount, rename, and share.
       These permissions cannot be delegated because the Linux
       mount(8) command restricts modifications of the global
       namespace to the root user.

A way to work this around could be to allow zfs commands through
/etc/sudoers.d/zfs configuration, which is commented out on Debian by
default.

Thanks,
Aron