From owner-freebsd-bugs@freebsd.org  Fri Sep 18 01:04:52 2015
Return-Path: <owner-freebsd-bugs@freebsd.org>
Delivered-To: freebsd-bugs@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 20CD89CE7CB
 for <freebsd-bugs@mailman.ysv.freebsd.org>;
 Fri, 18 Sep 2015 01:04:52 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from kenobi.freebsd.org (kenobi.freebsd.org
 [IPv6:2001:1900:2254:206a::16:76])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id E7B6A1F43
 for <freebsd-bugs@FreeBSD.org>; Fri, 18 Sep 2015 01:04:51 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from bugs.freebsd.org ([127.0.1.118])
 by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id t8I14pF0084278
 for <freebsd-bugs@FreeBSD.org>; Fri, 18 Sep 2015 01:04:51 GMT
 (envelope-from bugzilla-noreply@freebsd.org)
From: bugzilla-noreply@freebsd.org
To: freebsd-bugs@FreeBSD.org
Subject: [Bug 203185] mountd is exposing parent directories [on zfs mount?]
 that it should not be
Date: Fri, 18 Sep 2015 01:04:52 +0000
X-Bugzilla-Reason: AssignedTo
X-Bugzilla-Type: new
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: Base System
X-Bugzilla-Component: kern
X-Bugzilla-Version: 11.0-CURRENT
X-Bugzilla-Keywords: 
X-Bugzilla-Severity: Affects Only Me
X-Bugzilla-Who: ngie@FreeBSD.org
X-Bugzilla-Status: New
X-Bugzilla-Priority: ---
X-Bugzilla-Assigned-To: freebsd-bugs@FreeBSD.org
X-Bugzilla-Target-Milestone: ---
X-Bugzilla-Flags: 
X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform
 op_sys bug_status bug_severity priority component assigned_to reporter
Message-ID: <bug-203185-8@https.bugs.freebsd.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-BeenThere: freebsd-bugs@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: Bug reports <freebsd-bugs.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-bugs>,
 <mailto:freebsd-bugs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-bugs/>
List-Post: <mailto:freebsd-bugs@freebsd.org>
List-Help: <mailto:freebsd-bugs-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
 <mailto:freebsd-bugs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Sep 2015 01:04:52 -0000

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=203185

            Bug ID: 203185
           Summary: mountd is exposing parent directories [on zfs mount?]
                    that it should not be
           Product: Base System
           Version: 11.0-CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs@FreeBSD.org
          Reporter: ngie@FreeBSD.org

Granted, my "release" is approaching 4 months old now, but it
unsettles me that my files/directories are exposed even though
they shouldn't be by mountd.

% sudo bash
% uname -a
FreeBSD wkstn-fbsd-ngie 11.0-CURRENT FreeBSD 11.0-CURRENT #14
r283337+9c333ed(isilon-atf): Tue May 26 21:52:48 PDT 2015    
ngie@wkstn-fbsd-ngie:/usr/obj/usr/src/sys/GENERIC-WITHOUT-WITNESS  amd64
% cat /etc/exports
/home/ngie/XXX        -maproot=0:0 -alldirs
/scratch        -maproot=0:0
/usr/src                -maproot=0:0 -alldirs
/usr/ports              -maproot=0:0 -alldirs
/usr/ports/distfiles            -maproot=0:0 -alldirs
[root@wkstn-fbsd-ngie /home/ngie]# showmount -e
Exports list on localhost:
/usr/src                           Everyone
/usr/ports/distfiles               Everyone
/usr/ports                         Everyone
/home/ngie/XXX                   Everyone
/scratch                           Everyone
% mkdir /mnt/tmp
# THE FOLLOWING SHOULD NOT WORK -- it should fail with `Permission denied`
% mount localhost:/home/ngie /mnt/tmp
% ls /mnt/tmp

(... A whole lot of files get dumped out... )

% echo 'abcdefgh' > foobar
% ls -l foobar
-rw-r--r--  1 root  ngie  9 Sep 17 17:56 foobar
% ls -l /mnt/tmp/foobar
-rw-r--r--  1 root  ngie  9 Sep 17 17:56 /mnt/tmp/foobar
% df -h .
Filesystem    Size    Used   Avail Capacity  Mounted on
root/home     319G     88G    231G    28%    /home
% umount /mnt/tmp
% mount localhost:/etc /mnt/tmp
[tcp] localhost:/etc: Permission denied
[tcp6] localhost:/etc: Permission denied

-- 
You are receiving this mail because:
You are the assignee for the bug.