Unix Technical Forum

Re: NFS and groupspermissions.

This is a discussion on Re: NFS and groupspermissions. within the mailing.openbsd.tech forums, part of the OpenBSD category; --> On Sun, 26 Mar 2006, Han Boetes wrote: > Hi, > > OpenBSD is the NFS-server OS; Linux is ...


Go Back   Unix Technical Forum > Unix Operating Systems > OpenBSD > mailing.openbsd.tech

Register FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 02-18-2008, 08:27 AM
Otto Moerbeek
 
Posts: n/a
Default Re: NFS and groupspermissions.

On Sun, 26 Mar 2006, Han Boetes wrote:

> Hi,
>
> OpenBSD is the NFS-server OS; Linux is the client OS.
>
> ~% ls -l /home/public/han/nowplaying*
> -rw-rw-r-- 1 han nfs 87 Mar 26 20:39 nfs/nowplaying
> -rw-rw-r-- 1 han nfs 89 Mar 26 20:39 nfs/nowplayingice
>
>
> On my Linux machine I have a restricted account which is member of
> the group nfs and therefore should have permissions to write to
> this file, allas it has not.
>
> Actually at first I thought it was a Linux kernel error but after
> reporting the bug and talking with the maintainer he found out it
> was an OpenBSD-NFS bug.
>
> Read here if you are interested in the full discussion.
> http://bugzilla.kernel.org/show_bug.cgi?id=6256
>
> You can also find the result of `sudo tcpdump -s9000 -c100 -w file
> -Nt udp port 2049' here:
> http://bugzilla.kernel.org/attachmen...19&action=view
>
> Which contains a .gz file with the evidence that OpenBSD does
> something wrong.
>
> This also seems to be related to the owned of the directory in
> which the file exists. IE, if I changed the owner of the file to
> the restricted account, my own account -- also member of the nfs
> group -- still could write to the file.


Can or cannot?

> This is the matching line in exports:
> /home/public/han -maproot=han:nfs marsupilami


I am almost able to reproduce:

I can edit the file (using vi or redirection form the shell)
But a setattr call fails, I cannot touch(1) the file, for example.

For some reason your test generates a setattr call, which is normally
not done for writing a file.

I'll investigate more.

$ ls -al
total 16
drwxr-xr-x 2 otto wsrc 512 Mar 26 21:35 .
drwxr-xr-x 77 otto otto 5632 Mar 26 21:35 ..
-rw-rw-r-- 1 otto wsrc 0 Mar 26 22:26 aap
$ id
uid=999(test) gid=999(test) groups=999(test), 9(wsrc)
$ echo foo > aap
$ cat aap
foo
$ touch aap
touch: aap: Operation not permitted
$
-Otto

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


All times are GMT. The time now is 09:40 PM.


Powered by vBulletin® Version 3.6.5
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0
www.UnixAdminTalk.com