rpms/nfs-utils/devel nfs-utils-1.0.10-export-nosubtree.patch, 1.1, 1.2
fedora-cvs-commits at redhat.com
fedora-cvs-commits at redhat.com
Tue Oct 31 19:37:41 UTC 2006
Author: steved
Update of /cvs/dist/rpms/nfs-utils/devel
In directory cvs.devel.redhat.com:/tmp/cvs-serv26676
Modified Files:
nfs-utils-1.0.10-export-nosubtree.patch
Log Message:
Updated export man page to say no_subtree_check is on by default.
nfs-utils-1.0.10-export-nosubtree.patch:
support/export/export.c | 2 +-
support/export/xtab.c | 2 +-
support/include/nfslib.h | 2 +-
support/nfs/exports.c | 26 ++++++++------------------
utils/exportfs/exports.man | 24 ++++++------------------
5 files changed, 17 insertions(+), 39 deletions(-)
Index: nfs-utils-1.0.10-export-nosubtree.patch
===================================================================
RCS file: /cvs/dist/rpms/nfs-utils/devel/nfs-utils-1.0.10-export-nosubtree.patch,v
retrieving revision 1.1
retrieving revision 1.2
diff -u -r1.1 -r1.2
--- nfs-utils-1.0.10-export-nosubtree.patch 31 Oct 2006 16:38:58 -0000 1.1
+++ nfs-utils-1.0.10-export-nosubtree.patch 31 Oct 2006 19:37:39 -0000 1.2
@@ -1,5 +1,5 @@
--- nfs-utils-1.0.10/support/export/export.c.orig 2006-08-07 02:40:50.000000000 -0400
-+++ nfs-utils-1.0.10/support/export/export.c 2006-10-31 11:21:12.458470000 -0500
++++ nfs-utils-1.0.10/support/export/export.c 2006-10-31 14:28:51.582276000 -0500
@@ -34,7 +34,7 @@ export_read(char *fname)
nfs_export *exp;
@@ -10,7 +10,7 @@
if (!exp)
export_create(eep,0);
--- nfs-utils-1.0.10/support/export/xtab.c.orig 2006-08-07 02:40:50.000000000 -0400
-+++ nfs-utils-1.0.10/support/export/xtab.c 2006-10-31 11:21:29.838160000 -0500
++++ nfs-utils-1.0.10/support/export/xtab.c 2006-10-31 14:28:51.594264000 -0500
@@ -36,7 +36,7 @@ xtab_read(char *xtab, int is_export)
if ((lockid = xflock(xtab, "r")) < 0)
return 0;
@@ -21,7 +21,7 @@
!(exp = export_create(xp, is_export!=1))) {
continue;
--- nfs-utils-1.0.10/support/include/nfslib.h.orig 2006-08-07 02:40:50.000000000 -0400
-+++ nfs-utils-1.0.10/support/include/nfslib.h 2006-10-31 11:21:01.807421000 -0500
++++ nfs-utils-1.0.10/support/include/nfslib.h 2006-10-31 14:28:51.596262000 -0500
@@ -92,7 +92,7 @@ struct rmtabent {
* configuration file parsing
*/
@@ -32,7 +32,7 @@
void endexportent(void);
struct exportent * mkexportent(char *hname, char *path, char *opts);
--- nfs-utils-1.0.10/support/nfs/exports.c.orig 2006-08-07 02:40:50.000000000 -0400
-+++ nfs-utils-1.0.10/support/nfs/exports.c 2006-10-31 11:22:44.654243000 -0500
++++ nfs-utils-1.0.10/support/nfs/exports.c 2006-10-31 14:28:51.601257000 -0500
@@ -32,7 +32,8 @@
#include "xio.h"
@@ -125,3 +125,50 @@
return 1;
}
+--- nfs-utils-1.0.10/utils/exportfs/exports.man.orig 2006-08-07 02:40:50.000000000 -0400
++++ nfs-utils-1.0.10/utils/exportfs/exports.man 2006-10-31 14:29:07.004705000 -0500
+@@ -117,7 +117,7 @@ storage (see
+ above).
+
+ In releases of nfs-utils upto and including 1.0.0, this option was the
+-default. In all subsequence releases,
++default. In this and future releases,
+ .I sync
+ is the default, and
+ .I async
+@@ -183,9 +183,10 @@ with crossmnt to exported filesystems mo
+ filesystem "B" is mounted on a parent "A", setting crossmnt on "A" has
+ the same effect as setting "nohide" on B.
+ .TP
+-.IR no_subtree_check
+-This option disables subtree checking, which has mild security
+-implications, but can improve reliability in some circumstances.
++.IR subtree_check
++This option enables subtree checking, which does add
++another level of security, but can be unreliability
++in some circumstances.
+
+ If a subdirectory of a filesystem is exported, but the whole
+ filesystem isn't then whenever a NFS request arrives, the server must
+@@ -213,20 +214,7 @@ readonly, and at least doesn't see many
+ /var) and for which subdirectories may be exported, should probably be
+ exported with subtree checks enabled.
+
+-The default of having subtree checks enabled, can be explicitly
+-requested with
+-.IR subtree_check .
+-
+-From release 1.1.0 of nfs-utils onwards, the default will be
+-.I no_subtree_check
+-as subtree_checking tends to cause more problems than it is worth.
+-If you genuinely require subtree checking, you should explicitly put
+-that option in the
+-.B exports
+-file. If you put neither option,
+-.I exportfs
+-will warn you that the change is pending.
+-
++This type of subtree checking is disabled by default.
+ .TP
+ .IR insecure_locks
+ .TP
More information about the fedora-cvs-commits
mailing list