| commit | d42979c6ef1ec10b041c3394d969643f8862f7c3 | |
| author | Ryan Moeller <freqlabs@FreeBSD.org> | |
| Fri, 18 Mar 2022 12:47:57 +0000 (18 08:47 -0400) | ||
| committer | GitHub <noreply@github.com> | |
| Fri, 18 Mar 2022 12:47:57 +0000 (18 06:47 -0600) | ||
| tree | 3b3614a9635ab5f8f3017afefdc8d36e28f44558 | treesnapshot (tar.gz zip) |
| parent | a5920d24c04b64a96b4bd6be43a591a29f278b16 | commitdiff |
Fix ACL checks for NFS kernel server
This PR changes ZFS ACL checks to evaluate
fsuid / fsgid rather than euid / egid to avoid
accidentally granting elevated permissions to
NFS clients.
Reviewed-by: Serapheim Dimitropoulos <serapheim@delphix.com>
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Co-authored-by: Andrew Walker <awalker@ixsystems.com>
Signed-off-by: Ryan Moeller <freqlabs@FreeBSD.org>
Closes #13221
This PR changes ZFS ACL checks to evaluate
fsuid / fsgid rather than euid / egid to avoid
accidentally granting elevated permissions to
NFS clients.
Reviewed-by: Serapheim Dimitropoulos <serapheim@delphix.com>
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Co-authored-by: Andrew Walker <awalker@ixsystems.com>
Signed-off-by: Ryan Moeller <freqlabs@FreeBSD.org>
Closes #13221
12 files changed: