Page MenuHomeFreeBSD
Differential D37888

Patch the kgssapi do that it can run in a vnet prison
AbandonedPublic
Actions

Authored by rmacklem on Dec 28 2022, 12:23 AM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Feb 7, 11:48 AM
Unknown Object (File)
Sun, Jan 25, 10:08 AM
Unknown Object (File)
Sat, Jan 24, 9:11 PM
Unknown Object (File)
Dec 29 2025, 10:09 PM
Unknown Object (File)
Dec 4 2025, 4:26 AM
Unknown Object (File)
Dec 4 2025, 12:08 AM
Unknown Object (File)
Nov 27 2025, 5:05 AM
Unknown Object (File)
Nov 27 2025, 3:37 AM
View All Files
Subscribers
imp

Details

Reviewers
bz
jamie
asomers
Summary

D37519 allows mountd(8)/nfsd(8) to optionally run in a vnet
prison. This patch allows gssd(8) to run in a vnet prison
as well, so that nfsd(8) can support Kerberized NFS mounts.

This patch completes the set required to support all NFS
mounts in a vnet prison.

Test Plan

Did Kerberized NFS mounts to nfsd(8) in vnet
prisons configured to only allow Kerberized mounts.
(ie sys=krb5)

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

rmacklem created this revision.Dec 28 2022, 12:23 AM
Herald added a subscriber: imp. · View Herald TranscriptDec 28 2022, 12:23 AM
rmacklem requested review of this revision.Dec 28 2022, 12:23 AM
rmacklem updated this revision to Diff 115394.Jan 21 2023, 9:53 PM

One file in sys/rpc/rpcsec_gss was missing from
the diff.

rmacklem abandoned this revision.Jan 27 2023, 12:59 AM

The changes in this patch are now a part of D37519.

Revision Contents
Changeset List

PathSize
sys/
kgssapi/
gss_delete_sec_context.c
gss_delete_sec_context.c.vnetkgssapi
7 lines
gss_impl.c
gss_impl.c.vnetkgssapi
34 lines
gss_release_cred.c
gss_release_cred.c.vnetkgssapi
7 lines
gss_release_name.c
gss_release_name.c.vnetkgssapi
7 lines
gssapi_impl.h
gssapi_impl.h.vnetkgssapi
34 lines
rpc/
rpcsec_gss/
svc_rpcsec_gss.c
svc_rpcsec_gss.c.vnetkgssapi
97 lines

Diff 115394

View Options

sys/kgssapi/gss_delete_sec_context.c

Loading...
View Options

sys/kgssapi/gss_impl.c

Loading...
View Options

sys/kgssapi/gss_release_cred.c

Loading...
View Options

sys/kgssapi/gss_release_name.c

Loading...
View Options

sys/kgssapi/gssapi_impl.h

Loading...
View Options

sys/rpc/rpcsec_gss/svc_rpcsec_gss.c

Loading...