linux/fs/nfsd
J. Bruce Fields 6fa02839bf nfsd4: recheck for secure ports in fh_verify
As with commit 7fc90ec93a ("knfsd: nfsd:
call nfsd_setuser() on fh_compose(), fix nfsd4 permissions problem")
this is a case where we need to redo a security check in fh_verify()
even though the filehandle already has an associated dentry--if the
filehandle was created by fh_compose() in an earlier operation of the
nfsv4 compound, then we may not have done these checks yet.

Without this fix it is possible, for example, to traverse from an export
without the secure ports requirement to one with it in a single
compound, and bypass the secure port check on the new export.

While we're here, fix up some minor style problems and change a printk()
to a dprintk(), to make it harder for random unprivileged users to spam
the logs.

Signed-off-by: J. Bruce Fields <bfields@citi.umich.edu>
Reviewed-By: NeilBrown <neilb@suse.de>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2007-11-12 14:28:08 -08:00
..
auth.c knfsd: clean up EX_RDONLY 2007-07-19 10:04:52 -07:00
export.c exportfs: remove old methods 2007-10-22 08:13:21 -07:00
lockd.c knfsd: lockd: nfsd4: use same grace period for lockd and nfsd4 2007-07-17 10:23:07 -07:00
Makefile
nfs2acl.c knfsd: fix spurious EINVAL errors on first access of new filesystem 2007-11-12 14:28:08 -08:00
nfs3acl.c knfsd: fix spurious EINVAL errors on first access of new filesystem 2007-11-12 14:28:08 -08:00
nfs3proc.c
nfs3xdr.c knfsd: 64 bit ino support for NFS server 2007-10-09 18:31:57 -04:00
nfs4acl.c knfsd: nfsd4: fix handling of acl errrors 2007-07-17 10:23:07 -07:00
nfs4callback.c knfsd: nfsv4 delegation recall should take reference on client 2007-10-09 18:31:57 -04:00
nfs4idmap.c knfsd: nfs4 name->id mapping not correctly parsing negative downcall 2007-10-09 18:31:56 -04:00
nfs4proc.c knfsd: demote some printk()s to dprintk()s 2007-10-09 18:31:56 -04:00
nfs4recover.c cleanup asm/scatterlist.h includes 2007-11-02 08:47:06 +01:00
nfs4state.c Merge branch 'locks' of git://linux-nfs.org/~bfields/linux 2007-10-15 16:07:40 -07:00
nfs4xdr.c Merge git://git.linux-nfs.org/pub/linux/nfs-2.6 2007-10-15 10:47:35 -07:00
nfscache.c
nfsctl.c nfsd warning fix 2007-10-09 18:31:57 -04:00
nfsfh.c nfsd4: recheck for secure ports in fh_verify 2007-11-12 14:28:08 -08:00
nfsproc.c knfsd: nfsd4: make readonly access depend on pseudoflavor 2007-07-17 10:23:08 -07:00
nfssvc.c knfsd: move nfsv4 slab creation/destruction to module init/exit 2007-10-09 18:31:56 -04:00
nfsxdr.c knfsd: 64 bit ino support for NFS server 2007-10-09 18:31:57 -04:00
stats.c
vfs.c Use helpers to obtain task pid in printks 2007-10-19 11:53:43 -07:00