Subject: kern/3017: NFS server allows write access on readonly files
To: None <gnats-bugs@gnats.netbsd.org>
From: None <louis@marco.de>
List: netbsd-bugs
Date: 12/09/1996 17:07:00 
>Number:         3017
>Category:       kern
>Synopsis:       NFS server allows write access on readonly files
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people (Kernel Bug People)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Dec 10 00:05:00 1996
>Last-Modified:
>Originator:     
>Organization:
louis@dachau.marco.de		in real life: Ju"rgen Fluk
marco GmbH, 85221 Dachau	tel: +49 8131 516142
>Release:        1.2
>Environment:
	
System: NetBSD joghurt 1.2 NetBSD 1.2 (JOGHURT) #3: Thu Dec 5 16:37:38 MET 1996 root@joghurt:/usr/src/sys/arch/sparc/compile/JOGHURT sparc

>Description:
	From a SunOS 4.1.4 NFS client a normal user can write
	0444 files.
>How-To-Repeat:
	On a directory mounted from a NetBSD 1.2 server type:
		umask 333
		touch file
		ll file			shows -r--r--r--
		echo hallo >file	no error!
		cat file		gives "hallo"
>Fix:
>Audit-Trail:
>Unformatted: