[Bugs] [Bug 1468291] NFS Sub directory is getting mounted on solaris 10 even when the permission is restricted in nfs.export-dir volume option
bugzilla at redhat.com
bugzilla at redhat.com
Sun Jul 9 09:14:26 UTC 2017
https://bugzilla.redhat.com/show_bug.cgi?id=1468291
--- Comment #4 from Worker Ant <bugzilla-bot at gluster.org> ---
COMMIT: https://review.gluster.org/17718 committed in master by Niels de Vos
(ndevos at redhat.com)
------
commit e304f48fa262e5cdbe181fb3fee5dfb9c893108c
Author: Niels de Vos <ndevos at redhat.com>
Date: Thu Jul 6 17:04:17 2017 +0200
nfs: add permission checking for mounting over WebNFS
Solaris 10 uses WebNFS and not the MOUNT protocol. All permission checks
for allowing/denying clients to mount are done through the MNT handlers.
These handlers will not give out a filehandle to the NFS-client when
mounting is denied. This prevents clients from successful mounting.
However, over WebNFS a well known 'root-filehandle' is used directly
with the NFSv3 protocol.
When WebNFS was used, no permission checks (the "nfs.export-dir" option)
were applied. Now the WebNFS mount-handler in Gluster/NFS calls the
mnt3_parse_dir_exports() function that takes care of the permission
checking.
BUG: 1468291
Change-Id: Ic9dfd092473ba9c1c7b5fa38401cf9c0aa8395bb
Signed-off-by: Niels de Vos <ndevos at redhat.com>
Reviewed-on: https://review.gluster.org/17718
Smoke: Gluster Build System <jenkins at build.gluster.org>
Reviewed-by: soumya k <skoduri at redhat.com>
CentOS-regression: Gluster Build System <jenkins at build.gluster.org>
Reviewed-by: Kaleb KEITHLEY <kkeithle at redhat.com>
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=rfKsz1YzZd&a=cc_unsubscribe
More information about the Bugs
mailing list