From owner-freebsd-fs@FreeBSD.ORG Fri Jun 17 06:57:50 2011 Return-Path: Delivered-To: freebsd-fs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 713281065670 for ; Fri, 17 Jun 2011 06:57:50 +0000 (UTC) (envelope-from alexander@leidinger.net) Received: from mail.ebusiness-leidinger.de (mail.ebusiness-leidinger.de [217.11.53.44]) by mx1.freebsd.org (Postfix) with ESMTP id 1A1A98FC14 for ; Fri, 17 Jun 2011 06:57:49 +0000 (UTC) Received: from outgoing.leidinger.net (p4FC43341.dip.t-dialin.net [79.196.51.65]) by mail.ebusiness-leidinger.de (Postfix) with ESMTPSA id 2513C84400D; Fri, 17 Jun 2011 08:57:36 +0200 (CEST) Received: from webmail.leidinger.net (webmail.Leidinger.net [IPv6:fd73:10c7:2053:1::3:102]) by outgoing.leidinger.net (Postfix) with ESMTP id 5B86725F8; Fri, 17 Jun 2011 08:57:33 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=Leidinger.net; s=outgoing-alex; t=1308293853; bh=N+A+L/qiqwJQ8uwVd4ajAb0Kn+Axflfr8tMnOyF4tA0=; h=Message-ID:Date:From:To:Cc:Subject:References:In-Reply-To: MIME-Version:Content-Type:Content-Transfer-Encoding; b=kjBIoVPfyodtZHZca3XoT24CPJaRd9n1w0EOe2HtmVjhq9nnSNIvYHAjdzMUqjoG1 m8v2EkfPT+woZ7nFrd6fpxnjQKw5UQLgT4/Nu3bUszxHp/Okkr2XfdT0Tzj8V1hbgD W+jd1IhToEjQEXn1PfYVPZmRgHFo1zpA2uDkqByHA2WKMv+Ol9yJ/oVfpNMHqKPltZ 36+FtqMMOWz/Y8T1wLC7WfKeMP2g5yhc4E8jRiPv5HiItc2/CDN02cBFFGDWuDucLy rNj4jqoewalgqyN1uotMgo3Wf/2PJ3+YRMwjKKL67WwY/VDHonrV/F15N8CSEhLgrO x1qISf3ylg69A== Received: (from www@localhost) by webmail.leidinger.net (8.14.4/8.14.4/Submit) id p5H6vWKX012543; Fri, 17 Jun 2011 08:57:32 +0200 (CEST) (envelope-from Alexander@Leidinger.net) X-Authentication-Warning: webmail.leidinger.net: www set sender to Alexander@Leidinger.net using -f Received: from pslux.ec.europa.eu (pslux.ec.europa.eu [158.169.9.14]) by webmail.leidinger.net (Horde Framework) with HTTP; Fri, 17 Jun 2011 08:57:32 +0200 Message-ID: <20110617085732.34932j5fvh8v93vg@webmail.leidinger.net> Date: Fri, 17 Jun 2011 08:57:32 +0200 From: Alexander Leidinger To: Rick Macklem References: <2030796212.662722.1308235938983.JavaMail.root@erie.cs.uoguelph.ca> In-Reply-To: <2030796212.662722.1308235938983.JavaMail.root@erie.cs.uoguelph.ca> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; DelSp="Yes"; format="flowed" Content-Disposition: inline Content-Transfer-Encoding: 7bit User-Agent: Dynamic Internet Messaging Program (DIMP) H3 (1.1.6) X-EBL-MailScanner-Information: Please contact the ISP for more information X-EBL-MailScanner-ID: 2513C84400D.A13EA X-EBL-MailScanner: Found to be clean X-EBL-MailScanner-SpamCheck: not spam, spamhaus-ZEN, SpamAssassin (not cached, score=-0.1, required 6, autolearn=disabled, DKIM_SIGNED 0.10, DKIM_VALID -0.10, DKIM_VALID_AU -0.10) X-EBL-MailScanner-From: alexander@leidinger.net X-EBL-MailScanner-Watermark: 1308898657.16316@lvsPeaaNEb+yX4MbNLjlIQ X-EBL-Spam-Status: No Cc: FreeBSD FS Subject: Re: RFC: don't allow any access to unexported mounts for NFSv4 X-BeenThere: freebsd-fs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Filesystems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Jun 2011 06:57:50 -0000 Quoting Rick Macklem (from Thu, 16 Jun 2011 10:52:18 -0400 (EDT)): > As such, I think it might be better to remove the "hack" and > simply require that all file systems from the NFSv4 root down > be exported (which is what is needed for ZFS now, afaik). This does not match the behavior on Solaris. There we have pool/not_exported_dataset/exported_dataset and a v4 mount works (I didn't see how to verify if a mounted FS is NFSv4, but I modified /etc/default/nfs to have NFS_CLIENT_VERSMIN=4). Bye, Alexander. -- Marxist Law of Distribution of Wealth: Shortages will be divided equally among the peasants. http://www.Leidinger.net Alexander @ Leidinger.net: PGP ID = B0063FE7 http://www.FreeBSD.org netchild @ FreeBSD.org : PGP ID = 72077137