Re: review of new mountd option disabling use of rpcbind

2020-10-20 Thread Rick Macklem
Peter Eriksson wrote: > Suggestion: > Add a check for sysctl vfs.nfsd.server_min_nfsvers and if set to 4 or higher > - > automatically enable the “-R” option. I actually have patches to the /etc/rc.d scripts that both set vfs.nfsd.server_min_nfsvers=4 and the "-R" option. The reason I went with

Re: review of new mountd option disabling use of rpcbind

2020-10-20 Thread Peter Eriksson
Suggestion: Add a check for sysctl vfs.nfsd.server_min_nfsvers and if set to 4 or higher - automatically enable the “-R” option. - Peter > On 20 Oct 2020, at 02:56, Rick Macklem wrote: > > Hi, > > I've put a patch up on phabricator that adds a new option to mountd > which disables use of

review of new mountd option disabling use of rpcbind

2020-10-19 Thread Rick Macklem
Hi, I've put a patch up on phabricator that adds a new option to mountd which disables use of rpcbind. This can be done for NFSv4 only servers. It appears that rpcbind is now considered a security risk by some. I listed freqlabs@ as a reviewer, but if anyone else would like to review it, please