Page MenuHomeFreeBSD
Differential D37888

Patch the kgssapi do that it can run in a vnet prison
AbandonedPublic
Actions

Authored by rmacklem on Dec 28 2022, 12:23 AM.
Tags
None
Referenced Files
F138685587: D37888.diff
Thu, Dec 4, 4:26 AM
F138666287: D37888.diff
Thu, Dec 4, 12:08 AM
Unknown Object (File)
Thu, Nov 27, 5:05 AM
Unknown Object (File)
Thu, Nov 27, 3:37 AM
Unknown Object (File)
Tue, Nov 25, 3:11 PM
Unknown Object (File)
Sat, Nov 22, 4:29 PM
Unknown Object (File)
Thu, Nov 13, 12:31 PM
Unknown Object (File)
Wed, Nov 12, 2:50 PM
View All Files
Subscribers
imp

Details

Reviewers
bz
jamie
asomers
Summary

D37519 allows mountd(8)/nfsd(8) to optionally run in a vnet
prison. This patch allows gssd(8) to run in a vnet prison
as well, so that nfsd(8) can support Kerberized NFS mounts.

This patch completes the set required to support all NFS
mounts in a vnet prison.

Test Plan

Did Kerberized NFS mounts to nfsd(8) in vnet
prisons configured to only allow Kerberized mounts.
(ie sys=krb5)

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

rmacklem created this revision.Dec 28 2022, 12:23 AM
Herald added a subscriber: imp. · View Herald TranscriptDec 28 2022, 12:23 AM
rmacklem requested review of this revision.Dec 28 2022, 12:23 AM
rmacklem updated this revision to Diff 115394.Jan 21 2023, 9:53 PM

One file in sys/rpc/rpcsec_gss was missing from
the diff.

rmacklem abandoned this revision.Jan 27 2023, 12:59 AM

The changes in this patch are now a part of D37519.

Revision Contents
Changeset List

PathSize
sys/
kgssapi/
gss_delete_sec_context.c
gss_delete_sec_context.c.vnetkgssapi
7 lines
gss_impl.c
gss_impl.c.vnetkgssapi
34 lines
gss_release_cred.c
gss_release_cred.c.vnetkgssapi
7 lines
gss_release_name.c
gss_release_name.c.vnetkgssapi
7 lines
gssapi_impl.h
gssapi_impl.h.vnetkgssapi
34 lines
rpc/
rpcsec_gss/
svc_rpcsec_gss.c
svc_rpcsec_gss.c.vnetkgssapi
97 lines

Diff 115394

View Options

sys/kgssapi/gss_delete_sec_context.c

Loading...
View Options

sys/kgssapi/gss_impl.c

Loading...
View Options

sys/kgssapi/gss_release_cred.c

Loading...
View Options

sys/kgssapi/gss_release_name.c

Loading...
View Options

sys/kgssapi/gssapi_impl.h

Loading...
View Options

sys/rpc/rpcsec_gss/svc_rpcsec_gss.c

Loading...