Page MenuHomeFreeBSD
Differential D37888

Patch the kgssapi do that it can run in a vnet prison
AbandonedPublic
Actions

Authored by rmacklem on Dec 28 2022, 12:23 AM.
Tags
None
Referenced Files
F151508105: D37888.diff
Wed, Apr 8, 10:02 PM
F151418662: D37888.id.diff
Wed, Apr 8, 7:28 AM
Unknown Object (File)
Sun, Apr 5, 8:12 PM
Unknown Object (File)
Thu, Apr 2, 5:13 AM
Unknown Object (File)
Sat, Mar 28, 11:37 PM
Unknown Object (File)
Wed, Mar 18, 5:36 AM
Unknown Object (File)
Tue, Mar 17, 9:26 AM
Unknown Object (File)
Fri, Mar 13, 12:58 PM
View All Files
Subscribers
imp

Details

Reviewers
bz
jamie
asomers
Summary

D37519 allows mountd(8)/nfsd(8) to optionally run in a vnet
prison. This patch allows gssd(8) to run in a vnet prison
as well, so that nfsd(8) can support Kerberized NFS mounts.

This patch completes the set required to support all NFS
mounts in a vnet prison.

Test Plan

Did Kerberized NFS mounts to nfsd(8) in vnet
prisons configured to only allow Kerberized mounts.
(ie sys=krb5)

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

rmacklem created this revision.Dec 28 2022, 12:23 AM
Herald added a subscriber: imp. · View Herald TranscriptDec 28 2022, 12:23 AM
rmacklem requested review of this revision.Dec 28 2022, 12:23 AM
rmacklem updated this revision to Diff 115394.Jan 21 2023, 9:53 PM

One file in sys/rpc/rpcsec_gss was missing from
the diff.

rmacklem abandoned this revision.Jan 27 2023, 12:59 AM

The changes in this patch are now a part of D37519.

Revision Contents
Changeset List

PathSize
sys/
kgssapi/
gss_delete_sec_context.c
gss_delete_sec_context.c.vnetkgssapi
7 lines
gss_impl.c
gss_impl.c.vnetkgssapi
34 lines
gss_release_cred.c
gss_release_cred.c.vnetkgssapi
7 lines
gss_release_name.c
gss_release_name.c.vnetkgssapi
7 lines
gssapi_impl.h
gssapi_impl.h.vnetkgssapi
34 lines
rpc/
rpcsec_gss/
svc_rpcsec_gss.c
svc_rpcsec_gss.c.vnetkgssapi
97 lines

Diff 115394

View Options

sys/kgssapi/gss_delete_sec_context.c

Loading...
View Options

sys/kgssapi/gss_impl.c

Loading...
View Options

sys/kgssapi/gss_release_cred.c

Loading...
View Options

sys/kgssapi/gss_release_name.c

Loading...
View Options

sys/kgssapi/gssapi_impl.h

Loading...
View Options

sys/rpc/rpcsec_gss/svc_rpcsec_gss.c

Loading...