[Bugs] [Bug 1468291] NFS Sub directory is getting mounted on solaris 10 even when the permission is restricted in nfs.export-dir volume option

bugzilla at redhat.com bugzilla at redhat.com
Sun Jul 9 09:14:26 UTC 2017


https://bugzilla.redhat.com/show_bug.cgi?id=1468291



--- Comment #4 from Worker Ant <bugzilla-bot at gluster.org> ---
COMMIT: https://review.gluster.org/17718 committed in master by Niels de Vos
(ndevos at redhat.com) 
------
commit e304f48fa262e5cdbe181fb3fee5dfb9c893108c
Author: Niels de Vos <ndevos at redhat.com>
Date:   Thu Jul 6 17:04:17 2017 +0200

    nfs: add permission checking for mounting over WebNFS

    Solaris 10 uses WebNFS and not the MOUNT protocol. All permission checks
    for allowing/denying clients to mount are done through the MNT handlers.
    These handlers will not give out a filehandle to the NFS-client when
    mounting is denied. This prevents clients from successful mounting.
    However, over WebNFS a well known 'root-filehandle' is used directly
    with the NFSv3 protocol.

    When WebNFS was used, no permission checks (the "nfs.export-dir" option)
    were applied. Now the WebNFS mount-handler in Gluster/NFS calls the
    mnt3_parse_dir_exports() function that takes care of the permission
    checking.

    BUG: 1468291
    Change-Id: Ic9dfd092473ba9c1c7b5fa38401cf9c0aa8395bb
    Signed-off-by: Niels de Vos <ndevos at redhat.com>
    Reviewed-on: https://review.gluster.org/17718
    Smoke: Gluster Build System <jenkins at build.gluster.org>
    Reviewed-by: soumya k <skoduri at redhat.com>
    CentOS-regression: Gluster Build System <jenkins at build.gluster.org>
    Reviewed-by: Kaleb KEITHLEY <kkeithle at redhat.com>

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=rfKsz1YzZd&a=cc_unsubscribe


More information about the Bugs mailing list