From: Chuck Lever <chuck.lever@xxxxxxxxxx>
On Sat, 05 Oct 2024 18:40:39 +0200, Pali Rohár wrote:
> Currently NFSD_MAY_BYPASS_GSS and NFSD_MAY_BYPASS_GSS_ON_ROOT do not bypass
> only GSS, but bypass any method. This is a problem specially for NFS3
> AUTH_NULL-only exports.
>
> The purpose of NFSD_MAY_BYPASS_GSS_ON_ROOT is described in RFC 2623,
> section 2.3.2, to allow mounting NFS2/3 GSS-only export without
> authentication. So few procedures which do not expose security risk used
> during mount time can be called also with AUTH_NONE or AUTH_SYS, to allow
> client mount operation to finish successfully.
>
> [...]
Applied to nfsd-next for v6.13, thanks!
[1/1] nfsd: Fix NFSD_MAY_BYPASS_GSS and NFSD_MAY_BYPASS_GSS_ON_ROOT
commit: fa3d3ae84c5a6e9bd406c9ef75d3128a46cf1109
--
Chuck Lever
