Winston
2013-Apr-29 22:26 UTC
[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-13:05.nfsserver
For the purpose of the NFS vulnerability in 9.0-RELEASE, does it make
any difference whether one has used /etc/exports and an explicitly
started nfsd, or exported the files using "zfs set sharenfs={options}"
if the exported file system in both cases is ZFS? (That's probably
similar to asking whether ZFS has its own NFSd code or uses
/usr/sbin/nfsd.)
Thanks in advance,
-WBE
Xin Li
2013-Apr-30 05:24 UTC
[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-13:05.nfsserver
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 4/29/13 3:26 PM, Winston wrote:> For the purpose of the NFS vulnerability in 9.0-RELEASE, does it > make any difference whether one has used /etc/exports and an > explicitly started nfsd, or exported the files using "zfs set > sharenfs={options}" if the exported file system in both cases is > ZFS? (That's probably similar to asking whether ZFS has its own > NFSd code or uses /usr/sbin/nfsd.)No, there is no difference between these two approaches. Please also note that 9.0-RELEASE is EoL now, by the way. Cheers, -----BEGIN PGP SIGNATURE----- iQEcBAEBCAAGBQJRf1WfAAoJEG80Jeu8UPuzcmcIALNss+ZuGBqagzyAPa+QiXzm wVOIQAKXsHrDpKuvj9pNvJFGf9eUX+7+Ceau2itR+6NSAXJ7Xx9ATWQUTgvVY23t TZVgvLxcXMEDfw3Y4XAjfXao/19IB1PTHfbo27iZU2y9xJHi/bHG7I1CHRcE9+HN WRRr9iu4H7fdIxSnJu3UO3P9FyPO9CtWmhlTKQ7n1HNMTd8k3NfY/KMewYfCXEbW +VsUvH6h1eZFYKL6DcfA3YpZ/5u8PvlZBaWjzrshhhevtdavlruHlbf743hVEcP/ hKoMLoFJZ9a2sanEVogUvqqE4tSRSmaur1Eh6iadLmj08ScyCz/Ih4ktk7TH24k=Y4m8 -----END PGP SIGNATURE-----
Dag-Erling Smørgrav
2013-Apr-30 09:51 UTC
[FreeBSD-Announce] FreeBSD Security Advisory FreeBSD-SA-13:05.nfsserver
Winston <wbe at psr.com> writes:> For the purpose of the NFS vulnerability in 9.0-RELEASE, does it make > any difference whether one has used /etc/exports and an explicitly > started nfsd, or exported the files using "zfs set sharenfs={options}" > if the exported file system in both cases is ZFS? (That's probably > similar to asking whether ZFS has its own NFSd code or uses > /usr/sbin/nfsd.)ZFS does not have its own NFSD. What happens when you set sharenfs on a dataset is that it updates /etc/zfs/exports and HUPs mountd. DES -- Dag-Erling Sm?rgrav - des at des.no