Subject: Heads up: NFS reserved port changes.
To: None <current-users@NetBSD.ORG>
From: Frank van der Linden <frank@wins.uva.nl>
List: current-users
Date: 03/23/1997 22:03:40
I just checked in some changes to the NFS code:
* The use of reserved ports is now checked for each invidual
NFS request. Not strictly necessary when using TCP, but
the check is cheap.
* Using reserved ports is now the default. If you are using
-current as an NFS server, you may have to configure your
clients to use reserved ports if they don't already.
* Checking for reserved ports is determined by the '-noresport'
option in the exports file. Reserved ports are used by
default, the '-noresports' option will disable this
requirement.
I am well aware that the use of reserved ports is nowhere near a real
solution for NFS security problems, something like secure RPC is
needed for that. However, these changes do help a little and at least
make the use of reserved ports consistent throughout the code.
- Frank