Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 22 Feb 1995 15:37:56 -0500
From:      Garrett Wollman <wollman@halloran-eldar.lcs.mit.edu>
To:        Doug Rabson <dfr@render.com>
Cc:        current@FreeBSD.org
Subject:   mountd changes
Message-ID:  <9502222037.AA08339@halloran-eldar.lcs.mit.edu>
In-Reply-To: <Pine.BSF.3.91.950222133611.8409A-100000@minnow.render.com>
References:  <Pine.BSF.3.91.950222133611.8409A-100000@minnow.render.com>

next in thread | previous in thread | raw e-mail | index | archive | help
<<On Wed, 22 Feb 1995 13:40:32 +0000 (GMT), Doug Rabson <dfr@render.com> said:

> I have some changes here for mountd which do two things:
> (1)	Stop it from moaning when more than one mountpoint in a given 
> filesystem is exported.

> I am wondering whether to commit these.  (1) is probably safe but (2) 
> might be a security risk.  Comments?

`mountd' is right to moan, since NFS access control is not supported
except on a per-mount-point basis, so allowing access to any other
directory under a mount point is tantamount to allowing access to all
of them.  You might as well just use `-alldirs'.

-GAWollman

--
Garrett A. Wollman   | Shashish is simple, it's discreet, it's brief. ... 
wollman@lcs.mit.edu  | Shashish is the bonding of hearts in spite of distance.
Opinions not those of| It is a bond more powerful than absence.  We like people
MIT, LCS, ANA, or NSA| who like Shashish.  - Claude McKenzie + Florent Vollant



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9502222037.AA08339>