From owner-freebsd-current@freebsd.org Tue Oct 20 14:23:16 2020 Return-Path: Delivered-To: freebsd-current@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id C35034322F3 for ; Tue, 20 Oct 2020 14:23:16 +0000 (UTC) (envelope-from pen@lysator.liu.se) Received: from mail.lysator.liu.se (mail.lysator.liu.se [130.236.254.3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4CFwpC5z6Rz4NFc for ; Tue, 20 Oct 2020 14:23:15 +0000 (UTC) (envelope-from pen@lysator.liu.se) Received: from mail.lysator.liu.se (localhost [127.0.0.1]) by mail.lysator.liu.se (Postfix) with ESMTP id 189A240014 for ; Tue, 20 Oct 2020 16:23:12 +0200 (CEST) Received: by mail.lysator.liu.se (Postfix, from userid 1004) id 0260240021; Tue, 20 Oct 2020 16:23:11 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on bernadotte.lysator.liu.se X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED,AWL autolearn=disabled version=3.4.2 X-Spam-Score: -1.0 Received: from [IPv6:2001:6b0:17:f002:f117:32f:ba8e:c730] (unknown [IPv6:2001:6b0:17:f002:f117:32f:ba8e:c730]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.lysator.liu.se (Postfix) with ESMTPSA id 13AC940014; Tue, 20 Oct 2020 16:23:08 +0200 (CEST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) Subject: Re: review of new mountd option disabling use of rpcbind From: Peter Eriksson In-Reply-To: Date: Tue, 20 Oct 2020 16:23:08 +0200 Cc: "freebsd-current@FreeBSD.org" Content-Transfer-Encoding: quoted-printable Message-Id: <7F127C98-8E05-45D7-A652-C29D656B4B56@lysator.liu.se> References: To: Rick Macklem X-Mailer: Apple Mail (2.3608.120.23.2.4) X-Virus-Scanned: ClamAV using ClamSMTP X-Rspamd-Queue-Id: 4CFwpC5z6Rz4NFc X-Spamd-Bar: --- X-Spamd-Result: default: False [-3.32 / 15.00]; TO_DN_EQ_ADDR_SOME(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; MV_CASE(0.50)[]; R_SPF_ALLOW(-0.20)[+a:mail.lysator.liu.se]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-current@freebsd.org]; ARC_NA(0.00)[]; NEURAL_HAM_LONG(-1.01)[-1.006]; RCVD_COUNT_THREE(0.00)[4]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_MED(-0.20)[130.236.254.3:from]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[liu.se,none]; NEURAL_HAM_SHORT(-0.80)[-0.802]; NEURAL_HAM_MEDIUM(-1.01)[-1.012]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:2843, ipnet:130.236.0.0/16, country:SE]; RCVD_TLS_LAST(0.00)[]; MAILMAN_DEST(0.00)[freebsd-current] X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Oct 2020 14:23:16 -0000 Suggestion:=20 Add a check for sysctl vfs.nfsd.server_min_nfsvers and if set to 4 or = higher - automatically enable the =E2=80=9C-R=E2=80=9D option. - Peter > On 20 Oct 2020, at 02:56, Rick Macklem wrote: >=20 > Hi, >=20 > I've put a patch up on phabricator that adds a new option to mountd > which disables use of rpcbind. This can be done for NFSv4 only = servers. > It appears that rpcbind is now considered a security risk by some. >=20 > I listed freqlabs@ as a reviewer, but if anyone else would like to = review > it, please do so. (Someone has reviewed the man page update already. > Thanks bcr@.) >=20 > It's D26746. >=20 > rick > _______________________________________________ > freebsd-current@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to = "freebsd-current-unsubscribe@freebsd.org"