2009/3/13 Friedrich Locke <[email protected]>: > Hi folks. > > i am having a nightmare trying to get a directory exported read-only; then i > request for your help. > > I have a nfs server exporting some files read-only. In the client box i am > using amd to mount them. It works but it is mounted read-write. > Does anybody have any ideia on what is going on? > > Here goes some information: > > # On the server side > > si...@lion$ cd /etc > si...@lion$ cat > exports > # $OpenBSD: exports,v 1.2 2002/05/31 08:15:44 pjanzen Exp $ > # > # NFS exports Database > # See exports(5) for more information. Be very careful: misconfiguration > # of this file can result in your filesystems being readable by the world. > /h -maproot=nobody -network=10.0.0.0 -mask=255.255.255.0 > /asd/src -ro -maproot=nobody -network=10.0.0.0 -mask=255.255.255.0 > /usr/ports -ro -maproot=nobody -network=10.0.0.0 -mask=255.255.255.0 > si...@lion$ showmount -e > lion > Exports list on lion: > /usr/ports 10.0.0.0 > /h 10.0.0.0 > /asd/src 10.0.0.0 > si...@lion$ > > > # On the client side: > > si...@gw$ cd > si...@gw$ amq > / root "root" gw:(pid4982) > /asd/src direct amd.adk /asd/src > /home toplvl amd.home /home > /home/sioux nfs lion:/h /a/lion/h/sioux > /asd/src/. nfs lion:/asd/src /a/lion/asd/src > si...@gw$ mount > /dev/wd0a on / type ffs (local, synchronous) > amd:4982 on /asd/src type nfs (v2, udp, intr, timeo=100, retrans=100) > amd:4982 on /home type nfs (v2, udp, intr, timeo=100, retrans=100) > lion:/usr/ports on /usr/ports type nfs (read-only, v3, udp, timeo=100) > lion:/h on /a/lion/h type nfs (nosuid, v2, udp, timeo=100) > lion:/asd/src on /a/lion/asd/src type nfs (v2, udp, timeo=100) > si...@gw$ > > > Does anybody know why /asd/src is not being mounted read-only?
This may be wrong-footed and naive, but have you actually tried to write to the read-only exported NFS directory that appears to be mounted read/write? What happens if you type: touch /a/lion/asd/src/testfile Are you getting an error message then, or does it actually create the file? regards, --ropers
