man 5 exports describes different defaults as implemented - subtree_check

Bug #407132 reported by Conrad Wickers
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
nfs-utils (Ubuntu)
Confirmed
Wishlist
Unassigned

Bug Description

ubuntu 9.04 x64;
create a new nfs export with line in /etc/exports like:
/home/hamster/Public 192.168.75.0/255.255.255.0(sync)

the man 5 exports page says:
The default of having subtree checks enabled, can be explicitly requested with subtree_check.

However running nfsexportfs -a reports:
Assuming default behaviour ('no_subtree_check').

The default behaviour should be changed to match the man pages, or (worse) the man pages made to match the default ubuntu action of no_subtree_check. Note that man 5 exports clearly states that 'no_subtree_check' is less secure:
no_subtree_check
              This option disables subtree checking, which has mild security implications, but can improve reliability in some circumstances.

Tags: check nfs subtree
Kees Cook (kees)
security vulnerability: yes → no
visibility: private → public
Changed in nfs-utils (Ubuntu):
status: New → Confirmed
importance: Undecided → Wishlist
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.