Subject: Re: very weird NFS/VND error during "make depend" of kernel....
To: NetBSD-current Discussion List <current-users@netbsd.org>
From: Greg A. Woods <woods@weird.com>
List: current-users
Date: 06/27/2001 16:27:55
[ On Wednesday, June 27, 2001 at 21:45:23 (+0200), Manuel Bouyer wrote: ]
> Subject: Re: very weird NFS/VND error during "make depend" of kernel....
>
> SunOS-5's nfsd doesn't do any check, only mountd does. So if you can get (or
> guess) a filehandle, you can access it from anywhere without check.

Hmmm... yes....  So what about doing what SunOS documents instead of
what they actually do, i.e. have nfsd check permissions on the first
access by a given client for a given resource and then remember that
it's authorised (if it is).  Would this require all nfsd's to share this
info?  Is this getting too complex to be safe (as compared to just
always checking the current exports list on every access)?

-- 
							Greg A. Woods

+1 416 218-0098      VE3TCP      <gwoods@acm.org>     <woods@robohack.ca>
Planix, Inc. <woods@planix.com>;   Secrets of the Weird <woods@weird.com>