SEO
vBulletin Search Engine Optimization
| |||||||
| Register | FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
02-18-2008, 08:27 AM
| ||||
| ||||
 Re: NFS and groupspermissions. Does the setattr set the size? There is an additional check in this case and the one in OpenBSD3.8 is more restrictive than is the "fashion" these days. Most servers allow the owner to write/setattr-size, no matter what the permission modes say. I don't know if this is causing your problem, but I do know that Solaris10 clients won't like it, if you don't allow the setattr-size to happen for the owner, even if the modes bits say "no". Here is what my current server code has in it: if (va2.va_uid != nd->nd_cred->cr_uid || (exflag & MNT_EXSTRICTACCESS)) { nd->nd_repstat = nfsrv_accchk(vp, VWRITE, nd->nd_cred, exflag, p, 0); if (nd->nd_repstat) goto out; } ie. It only checks the mode bits if not the owner OR a "-strict" export flag has been put on the mount point. (To be honest, I only put the "-strict" mount point flag in to keep anyone who believes this is a security hole happy. I don't see why it should ever be used. After all, NFS using auth_sys has no security anyhow, except for firewalling based on client IP address.) rick      |
Linear Mode
