Date: Fri, 18 Sep 2015 01:04:52 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 203185] mountd is exposing parent directories [on zfs mount?] that it should not be Message-ID: <bug-203185-8@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=203185 Bug ID: 203185 Summary: mountd is exposing parent directories [on zfs mount?] that it should not be Product: Base System Version: 11.0-CURRENT Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: kern Assignee: freebsd-bugs@FreeBSD.org Reporter: ngie@FreeBSD.org Granted, my "release" is approaching 4 months old now, but it unsettles me that my files/directories are exposed even though they shouldn't be by mountd. % sudo bash % uname -a FreeBSD wkstn-fbsd-ngie 11.0-CURRENT FreeBSD 11.0-CURRENT #14 r283337+9c333ed(isilon-atf): Tue May 26 21:52:48 PDT 2015 ngie@wkstn-fbsd-ngie:/usr/obj/usr/src/sys/GENERIC-WITHOUT-WITNESS amd64 % cat /etc/exports /home/ngie/XXX -maproot=0:0 -alldirs /scratch -maproot=0:0 /usr/src -maproot=0:0 -alldirs /usr/ports -maproot=0:0 -alldirs /usr/ports/distfiles -maproot=0:0 -alldirs [root@wkstn-fbsd-ngie /home/ngie]# showmount -e Exports list on localhost: /usr/src Everyone /usr/ports/distfiles Everyone /usr/ports Everyone /home/ngie/XXX Everyone /scratch Everyone % mkdir /mnt/tmp # THE FOLLOWING SHOULD NOT WORK -- it should fail with `Permission denied` % mount localhost:/home/ngie /mnt/tmp % ls /mnt/tmp (... A whole lot of files get dumped out... ) % echo 'abcdefgh' > foobar % ls -l foobar -rw-r--r-- 1 root ngie 9 Sep 17 17:56 foobar % ls -l /mnt/tmp/foobar -rw-r--r-- 1 root ngie 9 Sep 17 17:56 /mnt/tmp/foobar % df -h . Filesystem Size Used Avail Capacity Mounted on root/home 319G 88G 231G 28% /home % umount /mnt/tmp % mount localhost:/etc /mnt/tmp [tcp] localhost:/etc: Permission denied [tcp6] localhost:/etc: Permission denied -- You are receiving this mail because: You are the assignee for the bug.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-203185-8>