Problem: When configuring TrueNAS-to-TrueNAS ZFS replication, the remote replication user must currently have sudo or root-level ZFS permissions. This creates a built-in security risk: If the backup system is compromised, an attacker automatically gains destructive access to the source system bec…

Fix Replication Vulnerability by Design (Missing Least-Privilege Replication User)

bacon December 3, 2025, 6:55pm 3

Related Feature Request:

Topic		Replies	Views
How to secure replication tasks? (root/sudo) TrueNAS General SCALE , ZFS	5	167	August 5, 2025
What are the minimum necessary permissions for non-root remote replication? TrueNAS General	4	567	September 24, 2025
Lock Down SSH Key so it can only be used for ZFS Send/Receive Commands Feature Requests Security	2	201	October 28, 2025
Protect replication backup from bad actors TrueNAS General SCALE , Backups , Security	9	131	June 10, 2025
Automatically Lock Target Dataset after ZFS Replication Feature Requests SCALE , Encryption , SSH , Replication , software	5	123	November 1, 2025