J. Bruce Fields 04716e6621 nfsd: permit unauthenticated stat of export root ... RFC 2623 section 2.3.2 permits the server to bypass gss authentication checks for certain operations that a client may perform when mounting. In the case of a client that doesn't have some form of credentials available to it on boot, this allows it to perform the mount unattended. (Presumably real file access won't be needed until a user with credentials logs in.) Being slightly more lenient allows lots of old clients to access krb5-only exports, with the only loss being a small amount of information leaked about the root directory of the export. This affects only v2 and v3; v4 still requires authentication for all access. Thanks to Peter Staubach testing against a Solaris client, which suggesting addition of v3 getattr, to the list, and to Trond for noting that doing so exposes no additional information. Signed-off-by: J. Bruce Fields <bfields@citi.umich.edu> Cc: Peter Staubach <staubach@redhat.com> Cc: Trond Myklebust <trond.myklebust@fys.uio.no>		2008-09-29 17:56:56 -04:00
..
cache.h	NFSD: Strip __KERNEL__ testing from unexported header files.	2008-04-23 16:13:41 -04:00
const.h
debug.h
export.h	Use struct path in struct svc_expkey	2008-02-14 21:17:08 -08:00
Kbuild	NFSD: Strip __KERNEL__ testing from unexported header files.	2008-04-23 16:13:41 -04:00
nfsd.h	nfsd: permit unauthenticated stat of export root	2008-09-29 17:56:56 -04:00
nfsfh.h
state.h	nfsd: eliminate unused nfs4_callback.cb_stat	2008-06-23 13:02:48 -04:00
stats.h
syscall.h
xdr3.h
xdr4.h
xdr.h