Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 204f4ce7 authored by J. Bruce Fields's avatar J. Bruce Fields
Browse files

nfsd4: allow fh_verify caller to skip pseudoflavor checks 



Signed-off-by: default avatarJ. Bruce Fields <bfields@redhat.com>
parent aea93397

fs/nfsd/nfsfh.c

+1 −1
Original line number Diff line number Diff line
@@ -344,7 +344,7 @@ fh_verify(struct svc_rqst *rqstp, struct svc_fh *fhp, int type, int access) 
	 * which clients virtually always use auth_sys for,

	 * even while using RPCSEC_GSS for NFS.

	 */

	if (access & NFSD_MAY_LOCK)

	if (access & NFSD_MAY_LOCK || access & NFSD_MAY_BYPASS_GSS)

		goto skip_pseudoflavor_check;

	/*

	 * Clients may expect to be able to use auth_sys during mount,

fs/nfsd/vfs.h

+1 −0
Original line number Diff line number Diff line
@@ -24,6 +24,7 @@ 
#define NFSD_MAY_LOCAL_ACCESS	128 /* IRIX doing local access check on device special file*/

#define NFSD_MAY_BYPASS_GSS_ON_ROOT 256

#define NFSD_MAY_NOT_BREAK_LEASE 512

#define NFSD_MAY_BYPASS_GSS	1024



#define NFSD_MAY_CREATE		(NFSD_MAY_EXEC|NFSD_MAY_WRITE)

#define NFSD_MAY_REMOVE		(NFSD_MAY_EXEC|NFSD_MAY_WRITE|NFSD_MAY_TRUNC)