freebsd-nq/sys
Rick Macklem 984c71f903 nfsd: Fix the failure return for non-fh NFSv4 operations
Without this patch, nfsd_checkrootexp() returns failure
and then the NFSv4 operation would reply NFSERR_WRONGSEC.
RFC5661 Sec. 2.6 only allows a few NFSv4 operations, none
of which call nfsv4_checktootexp(), to return NFSERR_WRONGSEC.
This patch modifies nfsd_checkrootexp() to return the
error instead of a boolean and sets the returned error to an RPC
layer AUTH_ERR, as discussed on nfsv4@ietf.org.
The patch also fixes nfsd_errmap() so that the pseudo
error NFSERR_AUTHERR is handled correctly such that an RPC layer
AUTH_ERR is replied to the NFSv4 client.

The two new "enum auth_stat" values have not yet been assigned
by IANA, but are the expected next two values.

The effect on extant NFSv4 clients of this change appears
limited to reporting a different failure error when a
mount that does not use adequate security is attempted.

MFC after:	2 weeks
2021-06-02 15:28:07 -07:00
..
amd64 amd64: Clear the local TSS when creating a new thread 2021-06-01 19:38:22 -04:00
arm arm: allwinner: Add clock driver for Display Engine to the build 2021-06-02 10:17:16 +02:00
arm64 linux: export AT_HWCAP and AT_HWCAP2 on aarch64 2021-06-01 13:50:20 +01:00
bsm
cam cam_sim: style: sort includes 2021-05-25 09:56:56 -06:00
cddl fbt: Remove some handling for multiple CTF containers 2021-04-02 17:49:13 -04:00
compat linux(4): Microoptimize futimesat, utimes, utime. 2021-05-31 22:54:18 +03:00
conf kmod.mk: Allow extra objects to be specified in modules 2021-06-02 10:39:58 -06:00
contrib VFS_QUOTACTL(9): allow implementation to indicate busy state changes 2021-05-30 14:53:47 -07:00
crypto ossl: Use crypto_cursor_segment(). 2021-05-25 16:59:19 -07:00
ddb fix style nit: space after if 2021-05-05 15:26:09 -06:00
dev sdhci_xenon: add UHS support 2021-06-02 09:55:20 +02:00
dts arm64: rockchip: Add some DTSO to disable sd/mmc 2021-05-13 18:15:31 +02:00
fs nfsd: Fix the failure return for non-fh NFSv4 operations 2021-06-02 15:28:07 -07:00
gdb gdb: report specific stop reason for watchpoints 2021-03-30 11:36:41 -03:00
geom gconcat: Add new lock to allow modifications to the disk list in preparation for online append 2021-06-02 15:59:25 -06:00
gnu
i386 i386: Make setidt_disp a size_t instead of uintptr_t 2021-06-01 19:37:50 -04:00
isa Remove more remnants of sio(4) 2021-04-07 14:33:02 -04:00
kern regen after tweaks to getgroups and setgroups 2021-06-02 13:24:50 -06:00
kgssapi opencrypto: Introduce crypto_dispatch_async() 2021-02-08 09:19:19 -05:00
libkern Use '.arch_extension crc' in the arm64 crc32 code 2021-05-06 07:42:35 +00:00
mips [mips/broadcom] set sysctl "hw.model" by SoC ChipCommon ID 2021-05-28 23:35:37 +03:00
modules hptnr: use BLOB_OBJS for pre-built .o's 2021-06-02 10:39:58 -06:00
net kern: ether_gen_addr: randomize on default hostuuid, too 2021-06-01 22:59:21 -05:00
net80211 net80211: prefix get_random_bytes() with net80211_ 2021-03-24 22:16:09 +00:00
netgraph [netflow] fix gateway reporting in ng_netflow 2021-05-30 10:12:49 +00:00
netinet tcp, udp: Permit binding with AF_UNSPEC if the address is INADDR_ANY 2021-05-31 18:53:34 -04:00
netinet6 Fix mbuf leaks in various pru_send implementations 2021-05-12 13:00:09 -04:00
netipsec Add missing sockaddr length and family validation to various protocols 2021-05-03 13:35:19 -04:00
netpfil pf: Avoid leaking pad bytes in struct pfr_astats when copying out 2021-06-01 19:37:50 -04:00
netsmb netsmb: Avoid a read-after-free in smb_t2_request_int() 2021-05-26 10:45:40 -04:00
nfs Fix panic when using BOOTP to resolve root path. 2021-03-28 14:02:40 -05:00
nfsclient nfs: Cleanup dead files 2021-03-17 06:16:31 +11:00
nfsserver nfs: Cleanup dead files 2021-03-17 06:16:31 +11:00
nlm
ofed OFED: migrate LinuxKPI net_device/ifnet macros into ofed 2021-05-27 12:26:01 +00:00
opencrypto cryptosoft: Use crypto_cursor_segment(). 2021-05-25 16:59:19 -07:00
powerpc powerpc: fix boot on pseries without hugepages 2021-06-02 16:27:36 -03:00
riscv arm64, riscv: remove reference to fsu_intr_fault 2021-05-25 12:26:52 -03:00
rpc nfsd: Fix the failure return for non-fh NFSv4 operations 2021-06-02 15:28:07 -07:00
security tcp_input/syncache: acquire only read lock on PCB for SYN,!ACK packets 2021-04-12 08:25:31 -07:00
sys regen after tweaks to getgroups and setgroups 2021-06-02 13:24:50 -06:00
teken
tests Revise FIB lookups per second benchmarking routines. 2021-05-05 12:28:17 +02:00
tools makesyscalls.lua: improve generated file style(9) compliance 2021-05-13 13:59:25 -04:00
ufs ffs: Correct the input size check in sysctl_ffs_fsck() 2021-05-31 18:59:18 -04:00
vm vm: add another pager private flag 2021-05-15 20:47:29 +00:00
x86 i386: Make setidt_disp a size_t instead of uintptr_t 2021-06-01 19:37:50 -04:00
xdr
xen x86/xen: remove PVHv1 code 2021-05-17 11:41:21 +02:00
Makefile