[ Search ]
[ What's New? ]
[ About ]
|
|
| nfsd(8) | |
|---|---|
| Systems Affected: | Linux running Universal NFS 2.0 or earlier. |
| Problem: |
Read-only export does not work, its only parsed. Users can kill nsfd. This is because the nsfd seteuid(2) to the current request uid instead of setfsuid(2)/setfsgid(2). The root_squash and no_root_squash flags does not work. File handles are easly guessed. Default exports file contains '#' at the start of file. Under some broken resolvers this means a machine named '#' can mount all your disks. |
| Solution: | Upgrade to Universal NSF 2.1 or later. |
|
Aleph One / aleph1@underground.org Copyright © 1996 Computer Underground Society. All rights reserved. |
|