Re: CVS commit: src/tests/fs/common

[David Laight <david%l8s.co.uk@localhost>]

On Fri, Dec 31, 2010 at 06:16:41PM +0000, Antti Kantee wrote:
> Module Name:  src
> Committed By: pooka
> Date:         Fri Dec 31 18:16:41 UTC 2010
> 
> Modified Files:
>       src/tests/fs/common: h_fsmacros.h
> 
> Log Message:
> Introduce r/o tests.  They do two mounts: the first one is r/w and
> runs a generator which primes the fs.  The second one is r/o and
> does the actual testing.  Also, introduce a nfsro fstype which does
> a clientside r/w mount for a r/o server export.
> 
> requested by yamt
> 
> (one nfsro test currently fails with EROFS vs. EACCES.  Hopefully
> someone else can debate the correct errno)

From what I remember of the NFS protocol, the following 'rules' applied:
1) If you export part of a filesystem, you export all of the filesystem.
2) If you give anyone access, you give everyone access.
3) If you give anyone write access, you give everyone write access.
This is all because it is the 'mount' protocol that verifies whether
a client has access - so a client that disobeys the mount protocol, or
fakes up valid nfs file handles can avoid the access checks.

It is possible that netbsd's nfs server does additional checks but
they are expensive to do on every nfs request.

        David

-- 
David Laight: david%l8s.co.uk@localhost