Date: Thu, 27 Feb 2020 15:39:37 -0800 From: Alan Batie <alan@peak.org> To: Luoqi Chen <luoqi.chen@gmail.com> Cc: freebsd-fs <freebsd-fs@freebsd.org> Subject: Re: Linux could write to read only files on FreeBSD NFS server Message-ID: <751dcbf4-9cd6-0d6f-a9d9-38615966cf9d@peak.org> In-Reply-To: <CAHJqQjtLA9sFgczxC3xRZVXj6QzK-xLyz-R_L5y68vq8bw=xEg@mail.gmail.com> References: <CAHJqQjuEVpL4xV1dAf6scFqFfMNm1gY3jOaO64ZQJTCQi_qzcQ@mail.gmail.com> <707243CD-C67E-4DAD-AC5A-68EC11CFFDFD@lysator.liu.se> <6EC06026-DA28-4CAC-8D56-5C7856D4625E@lysator.liu.se> <YTBPR01MB3374713F573B548791A22F98DDEB0@YTBPR01MB3374.CANPRD01.PROD.OUTLOOK.COM> <CAHJqQjsP-w9LAS4AV64Pu9Jmv0kVFodKdT_jLUcyop3sNVh_EA@mail.gmail.com> <d73aea39-c5c2-e8ce-3745-bfd49fd69664@peak.org> <CAHJqQjtLA9sFgczxC3xRZVXj6QzK-xLyz-R_L5y68vq8bw=xEg@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --]
On 2/27/20 3:31 PM, Luoqi Chen wrote:
> Yes, except to leave the read bit(s) on. I can confirm that the write would
> fail on centos 6/7/8 if all bits are cleared.
>
That makes no difference:
<zmail03-admin.peak.org> [117] $ sh -x ~/nfst
+ cat /etc/redhat-release
CentOS release 6.10 (Final)
+ df .
Filesystem 1K-blocks Used Available Use% Mounted on
zbackups02.peak.org:/zbackups/zmail03-admin
5027215872 91682304 4935533568 2% /zbackups
+ rm -f x
+ touch x
+ chmod 444 x
+ ls -l x
-r--r--r--. 1 alan root 0 Feb 27 15:38 x
+ echo foo
/home/alan/nfst: line 9: x: Permission denied
+ cat x
<zmail03-admin.peak.org> [118] $
[-- Attachment #2 --]
0 *H
010
`He 0 *H
k00ȠTt"ϰTTzGv 0
*H
01 0 UIT10U Bergamo10U Ponte San Pietro1#0!U
Actalis S.p.A./033585209671,0*U #Actalis Client Authentication CA G20
191211190716Z
201211190716Z010U
alan@peak.org0"0
*H
0
FF\'U[¥#("OM ~t\#}']CM59C1TT 1捯KE< -J
)uO 0ؘ=qJzhO<~Fĭ aGrmo;*vHWȢLw+]eO ><SkB&i1/Hx坭qpssᦳ7c %"!{1Spi}q0`;wzBHv 5:D
00 U 0 0 U #0kh% Q4W\Mi0~+r0p0;+0/http://cacert.actalis.it/certs/actalis-autclig201+0%http://ocsp09.actalis.it/VA/AUTHCL-G20U 0
alan@peak.org0GU @0>0<+ 0200+$https://www.actalis.it/area-download0 U %0++0HU A0?0=;97http://crl09.actalis.it/Repository/AUTHCL-G2/getLastCRL0 U `Fa XjOUNdl0U 0
*H
g>&ǎVґQ8`
1܇3[9BO uVH4X6:c'_70ōwd,22ZuqSɱH#pk_]N'VmƓ| ,)Yڕf&$`;Hl'KC0PS6ƫ/ )"
kC&K _1RWnbvUd^
QN ~g՛JhZmօ;HMI^w00kOK[ދeA^0
*H
0k1 0 UIT10 U Milan1#0!U
Actalis S.p.A./033585209671'0%U Actalis Authentication Root CA0
190920071205Z
300922112202Z01 0 UIT10U Bergamo10U Ponte San Pietro1#0!U
Actalis S.p.A./033585209671,0*U #Actalis Client Authentication CA G20"0
*H
0
hsz</g=Δ|cG'X('EOtD
uvdB!DK3ITӛ\|ڊWk*$( G"¤X^Rv \dÙ2vbn Th0QTHnn\`Xi
`Em55q^
מ~:!5ּhs {Q,Sv\FJ *c}b mq'#K$XK 00U 00 U #0R؈:ȟxf{8p60A+50301+0%http://ocsp05.actalis.it/VA/AUTH-ROOT0EU >0<0:U 0200+$https://www.actalis.it/area-download0'U % 0 +++ 0U 00ldap://ldap05.actalis.it/cn%3dActalis%20Authentication%20Root%20CA,o%3dActalis%20S.p.A.%2f03358520967,c%3dIT?certificateRevocationList;binary0=;97http://crl05.actalis.it/Repository/AUTH-ROOT/getLastCRL0 U kh% Q4W\Mi0U 0
*H
`DrAD9/&)ooIz.j}_
$9ϞÝ@- yĵ\MF>W4LT @#?&wTKÝPLd e l悈o-h3YꎀP uj0jh4ECHI[ۡVhu%`:x>ޔW txS'\~ vZcmC HRdK.{yS %k{jGHi&JQ(0 j&2}
gvTS Lfb
am/D4;:fe,L+zU3ن&.|wx/HM*Ert?:11חpMSw̜[f>(yf:#ew[*ua-s$ќ9; 0O/wR2
ML qK17G=P.ywˈi,uV=}!8M~ I
664m
VѠT+10001 0 UIT10U Bergamo10U Ponte San Pietro1#0!U
Actalis S.p.A./033585209671,0*U #Actalis Client Authentication CA G2Tt"ϰTTzGv 0
`He E0 *H
1 *H
0 *H
1
200227233937Z0/ *H
1" u= },!Iܜ`C>0l *H
1_0]0 `He*0 `He0
*H
0*H
0
*H
@0+0
*H
(0 +71001 0 UIT10U Bergamo10U Ponte San Pietro1#0!U
Actalis S.p.A./033585209671,0*U #Actalis Client Authentication CA G2Tt"ϰTTzGv 0 *H
101 0 UIT10U Bergamo10U Ponte San Pietro1#0!U
Actalis S.p.A./033585209671,0*U #Actalis Client Authentication CA G2Tt"ϰTTzGv 0
*H
tIY3|R4!Թ!Gd
qqOSP7c9 1CzEWŧ@OTB gB@g(iseZj8ZXdZvdsnWw.6JlBXyK}q35y[wR /y|9br(c W^0{ڵ a?<i;&Yrԧ Ml,
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?751dcbf4-9cd6-0d6f-a9d9-38615966cf9d>