summaryrefslogtreecommitdiffstats
path: root/man
diff options
context:
space:
mode:
authorRichard Laager <[email protected]>2019-04-30 15:53:54 -0500
committerBrian Behlendorf <[email protected]>2019-04-30 13:53:54 -0700
commit77449a1ab0467a6fc43211a9c19d6f60be52a737 (patch)
treee75096d04ad3d0decb6c12b21bf664aa51081cbf /man
parent294fcb543e4bf8d8d36832e9071ef0f6b1c9423e (diff)
Clarify that deduped data is encrypted
Reviewed-by: Brian Behlendorf <[email protected]> Reviewed-by: George Melikov <[email protected]> Reviewed-by: Tom Caputi <[email protected]> Signed-off-by: Richard Laager <[email protected]> Closes #8691
Diffstat (limited to 'man')
-rw-r--r--man/man8/zfs.83
1 files changed, 2 insertions, 1 deletions
diff --git a/man/man8/zfs.8 b/man/man8/zfs.8
index 3b118ac3e..7c8e5bc2e 100644
--- a/man/man8/zfs.8
+++ b/man/man8/zfs.8
@@ -2388,7 +2388,8 @@ directory listings, FUID mappings, and
.Sy groupused
data. ZFS will not encrypt metadata related to the pool structure, including
dataset and snapshot names, dataset hierarchy, properties, file size, file
-holes, and deduplication tables.
+holes, and deduplication tables (though the deduplicated data itself is
+encrypted).
.Pp
Key rotation is managed by ZFS. Changing the user's key (e.g. a passphrase)
does not require re-encrypting the entire dataset. Datasets can be scrubbed,