From 6fe81fed623b052e16f3a11228926d969dde5c4e Mon Sep 17 00:00:00 2001 From: rwatson Date: Sat, 19 Oct 2002 21:27:40 +0000 Subject: Set the NOMACCHECK flag for namei()'s generated by the NFS server code. We currently don't enforce protections on NFS-originated VOP's. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories --- sys/nfsserver/nfs_srvsubs.c | 1 + 1 file changed, 1 insertion(+) (limited to 'sys/nfsserver') diff --git a/sys/nfsserver/nfs_srvsubs.c b/sys/nfsserver/nfs_srvsubs.c index 1e06e3e..25d0d84 100644 --- a/sys/nfsserver/nfs_srvsubs.c +++ b/sys/nfsserver/nfs_srvsubs.c @@ -604,6 +604,7 @@ nfs_namei(struct nameidata *ndp, fhandle_t *fhp, int len, struct componentname *cnp = &ndp->ni_cnd; *retdirp = NULL; + cnp->cn_flags |= NOMACCHECK; cnp->cn_pnbuf = uma_zalloc(namei_zone, M_WAITOK); /* -- cgit v1.1