From owner-freebsd-security@FreeBSD.ORG Tue Apr 30 09:52:06 2013 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 35AA8F92 for ; Tue, 30 Apr 2013 09:52:06 +0000 (UTC) (envelope-from des@des.no) Received: from smtp.des.no (smtp.des.no [194.63.250.102]) by mx1.freebsd.org (Postfix) with ESMTP id F306B1671 for ; Tue, 30 Apr 2013 09:52:05 +0000 (UTC) Received: from nine.des.no (smtp.des.no [194.63.250.102]) by smtp-int.des.no (Postfix) with ESMTP id 2E9CAD8A7; Tue, 30 Apr 2013 09:52:05 +0000 (UTC) Received: by nine.des.no (Postfix, from userid 1001) id 755A21CAD; Tue, 30 Apr 2013 11:51:40 +0200 (CEST) From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= To: Winston Subject: Re: [FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-13:05.nfsserver References: <20130429205552$12b7@rincewind.paeps.cx> <201304292226.r3TMQOnI056590@psr.com> Date: Tue, 30 Apr 2013 11:51:39 +0200 In-Reply-To: <201304292226.r3TMQOnI056590@psr.com> (Winston's message of "Mon, 29 Apr 2013 18:26 EDT") Message-ID: <86a9oggxck.fsf@nine.des.no> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Cc: freebsd-security@freebsd.org X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Apr 2013 09:52:06 -0000 Winston writes: > For the purpose of the NFS vulnerability in 9.0-RELEASE, does it make > any difference whether one has used /etc/exports and an explicitly > started nfsd, or exported the files using "zfs set sharenfs=3D{options}" > if the exported file system in both cases is ZFS? (That's probably > similar to asking whether ZFS has its own NFSd code or uses > /usr/sbin/nfsd.) ZFS does not have its own NFSD. What happens when you set sharenfs on a dataset is that it updates /etc/zfs/exports and HUPs mountd. DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no