nfsd: restrict filehandles accepted in V4ROOT case

Browse source

On V4ROOT exports, only accept filehandles that are the *root* of some
export.  This allows mountd to allow or deny access to individual
directories and symlinks on the pseudofilesystem.

Note that the checks in readdir and lookup are not enough, since a
malicious host with access to the network could guess filehandles that
they weren't able to obtain through lookup or readdir.

Signed-off-by: Steve Dickson <steved@redhat.com>
Signed-off-by: J. Bruce Fields <bfields@citi.umich.edu>

...

This commit is contained in:

Steve Dickson 2009-09-09 15:06:05 -04:00 • committed by J. Bruce Fields

parent f2ca7153ca

commit 03a816b46d

3 changed files with 39 additions and 6 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

5

fs/nfsd/nfsd.h

View file

34

fs/nfsd/nfsfh.c

View file

6

fs/nfsd/vfs.c

View file