Bug#962254: Umask ignored when mounting NFSv4.2 share of an exported Filesystem with noacl (was: Re: Bug#962254: NFS(v4) broken at 4.19.118-2)

2020-06-17 Thread J. Bruce Fields
On Wed, Jun 17, 2020 at 04:42:56PM +0200, Andreas Gruenbacher wrote: > Hi Bruce, > > On Wed, Jun 17, 2020 at 2:58 AM J. Bruce Fields wrote: > > I think I'll send the following upstream. > > looking good, but how about using a little helper for this? I like it. And the

Bug#962254: Umask ignored when mounting NFSv4.2 share of an exported Filesystem with noacl

2020-06-17 Thread J. Bruce Fields
On Wed, Jun 17, 2020 at 06:58:29AM +0200, Salvatore Bonaccorso wrote: > On Tue, Jun 16, 2020 at 08:58:49PM -0400, J. Bruce Fields wrote: > Thank you, could test this on my test setup and seem to work properly. Great, thanks. > Should it also be CC'ed to sta...@vger.kernel.org so it is

Bug#962254: Umask ignored when mounting NFSv4.2 share of an exported Filesystem with noacl (was: Re: Bug#962254: NFS(v4) broken at 4.19.118-2)

2020-06-16 Thread J. Bruce Fields
l send the following upstream. --b. commit 595ccdca9321 Author: J. Bruce Fields Date: Tue Jun 16 16:43:18 2020 -0400 nfsd: apply umask on fs without ACL support The server is failing to apply the umask when creating new objects on filesystems without ACL support.

Bug#962254: Umask ignored when mounting NFSv4.2 share of an exported Filesystem with noacl (was: Re: Bug#962254: NFS(v4) broken at 4.19.118-2)

2020-06-15 Thread J. Bruce Fields
On Mon, Jun 15, 2020 at 10:38:20PM -0400, J. Bruce Fields wrote: > Thanks for the detailed reproducer. > > It's weird, as the server is basically just setting the transmitted > umask and then calling into the vfs to handle the rest, so it's not much > different from any other user

Bug#962254: Umask ignored when mounting NFSv4.2 share of an exported Filesystem with noacl (was: Re: Bug#962254: NFS(v4) broken at 4.19.118-2)

2020-06-15 Thread J. Bruce Fields
Thanks for the detailed reproducer. It's weird, as the server is basically just setting the transmitted umask and then calling into the vfs to handle the rest, so it's not much different from any other user. But the same reproducer run just on the ext4 filesystem does give the right

Bug#962254: Umask ignored when mounting NFSv4.2 share of an exported ZFS (with acltype=off) (was: Re: Bug#962254: NFS(v4) broken at 4.19.118-2)

2020-06-15 Thread J. Bruce Fields
On Sat, Jun 13, 2020 at 11:45:27AM -0700, Elliott Mitchell wrote: > I disagree with this assessment. All of the reporters have been using > ZFS, but this could indicate an absence of testers using other > filesystems. We need someone with a NFS server which has a 4.15+ kernel > and uses a

Bug#714974: [PATCH] jfs: avoid misuse of cookie value of 2

2013-08-15 Thread J. Bruce Fields
On Wed, Aug 14, 2013 at 10:54:31PM -0500, Dave Kleikamp wrote: For the sake of those not watching https://bugzilla.kernel.org/show_bug.cgi?id=60737 It looks like the problem is that jfs was using a cookie value of 2 for a real directory entry, where NFSv4 expect 2 to represent ... This

Bug#714974: [Jfs-discussion] NFS 'readdir loop' error on JFS

2013-08-12 Thread J. Bruce Fields
On Mon, Aug 12, 2013 at 01:29:15AM -0700, Christian Kujau wrote: Sorry for the noise, here's another oddity, same setup (client server running 3.11-rc5): $ find /mnt/nfs/usr/share/ -name getopt.awk -ls 250724 -rw-r--r-- 1 root root 2237 Mar 16 04:46

Bug#702448: nfs-common: UID's do not get properly mapped

2013-03-07 Thread J. Bruce Fields
I've created users test1 and test2 in /etc/passwd, but with swapped UID's There's a common (and understable) mistake here: many people think that NFSv4 never requires uid's and gid's to agree between hosts. This is not true. NFSv4, when used with traditional auth_sys

Re: security impact of nfsd4_op_flags

2011-04-10 Thread J. Bruce Fields
On Sun, Mar 27, 2011 at 03:09:37PM -0600, dann frazier wrote: Mi, We were wondering if you could help us define the security impact (if any) of your fix for nfsd4_op_flags, commit 5ece3ca upstream. If it does have a security impact, we can work with MITRE to get a CVE ID assigned.