[lkml]   [2000]   [Nov]   [13]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Announce: NFS-client & NIS-client UID/GID remapper
On Mon, Nov 06, 2000 at 06:21:24PM -0500, Albert D. Cahalan wrote:
> The UID/GID mapper should be sepatate from the regex rewriting rules.

This is already done - the code is independent, it is just written in the same
source file. Any problems from it?

> Both should be separate from NFS, because they have little to do with NFS.
> These are useful generic VFS features. It would be perfectly reasonable
> to use these features on a Zip disk with UFS (from MacOS X maybe).

Hmm... You are perfectly right, oops.

There is only a bit of technical detail how to set such mapping: Currently I'm
using the "struct nfs_mount_data" which can contain any passed id-mapping
table. When it would be filesystem-general, it would need different solution
("data" mount(2) argument is passed only as textstring, not as flexible
'struct' as in NFS case). Probably to pass it by ioctl() call after the
mount(2) call has been done.

OK, I've todolisted this better generic-VFS approach, thanks. B ut I'll
implement it with some delay (busy etc).

> The pathname remapper might best be done as a namespace operation
> similar to mounting.
> an exploitable /usr/bin/suidperl, I'd like to "mount" a new
> executable on top of that from /bin/good-suidperl to fix the hole.

Such pathname remapper may be nice but it IMHO doesn't correspond to any code
written for announced idmapper. This would be a nice but completely separate
feature. Just to clarify - I have previously written:

# As a feature it also supports general regex rewriting rules for NIS client (to
# enable adjusts like "/bin/ksh -> /bin/bash" etc.).

This has the purpose to change the NIS line itself to prevent such hacking as
simulating some /bin/ksh etc.

Karel Zatloukal
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
Please read the FAQ at

 \ /
  Last update: 2005-03-22 12:45    [W:0.046 / U:0.104 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site