Re: review of new mountd option disabling use of rpcbind

From: Peter Eriksson <pen_at_lysator.liu.se>
Date: Tue, 20 Oct 2020 16:23:08 +0200
Suggestion: 
Add a check for sysctl vfs.nfsd.server_min_nfsvers and if set to 4 or higher - automatically enable the “-R” option.

- Peter


> On 20 Oct 2020, at 02:56, Rick Macklem <rmacklem_at_uoguelph.ca> wrote:
> 
> Hi,
> 
> I've put a patch up on phabricator that adds a new option to mountd
> which disables use of rpcbind. This can be done for NFSv4 only servers.
> It appears that rpcbind is now considered a security risk by some.
> 
> I listed freqlabs_at_ as a reviewer, but if anyone else would like to review
> it, please do so. (Someone has reviewed the man page update already.
> Thanks bcr_at_.)
> 
> It's D26746.
> 
> rick
> _______________________________________________
> freebsd-current_at_freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to "freebsd-current-unsubscribe_at_freebsd.org"
Received on Tue Oct 20 2020 - 12:23:16 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:41:25 UTC