[Bug 203185] mountd is exposing parent directories [on zfs mount?] that it should not be

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=203185

            Bug ID: 203185
           Summary: mountd is exposing parent directories [on zfs mount?]
                    that it should not be
           Product: Base System
           Version: 11.0-CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: ngie at FreeBSD.org

Granted, my "release" is approaching 4 months old now, but it
unsettles me that my files/directories are exposed even though
they shouldn't be by mountd.

% sudo bash
% uname -a
FreeBSD wkstn-fbsd-ngie 11.0-CURRENT FreeBSD 11.0-CURRENT #14
r283337+9c333ed(isilon-atf): Tue May 26 21:52:48 PDT 2015    
ngie at wkstn-fbsd-ngie:/usr/obj/usr/src/sys/GENERIC-WITHOUT-WITNESS  amd64
% cat /etc/exports
/home/ngie/XXX        -maproot=0:0 -alldirs
/scratch        -maproot=0:0
/usr/src                -maproot=0:0 -alldirs
/usr/ports              -maproot=0:0 -alldirs
/usr/ports/distfiles            -maproot=0:0 -alldirs
[root at wkstn-fbsd-ngie /home/ngie]# showmount -e
Exports list on localhost:
/usr/src                           Everyone
/usr/ports/distfiles               Everyone
/usr/ports                         Everyone
/home/ngie/XXX                   Everyone
/scratch                           Everyone
% mkdir /mnt/tmp
# THE FOLLOWING SHOULD NOT WORK -- it should fail with `Permission denied`
% mount localhost:/home/ngie /mnt/tmp
% ls /mnt/tmp

(... A whole lot of files get dumped out... )

% echo 'abcdefgh' > foobar
% ls -l foobar
-rw-r--r--  1 root  ngie  9 Sep 17 17:56 foobar
% ls -l /mnt/tmp/foobar
-rw-r--r--  1 root  ngie  9 Sep 17 17:56 /mnt/tmp/foobar
% df -h .
Filesystem    Size    Used   Avail Capacity  Mounted on
root/home     319G     88G    231G    28%    /home
% umount /mnt/tmp
% mount localhost:/etc /mnt/tmp
[tcp] localhost:/etc: Permission denied
[tcp6] localhost:/etc: Permission denied

-- 
You are receiving this mail because:
You are the assignee for the bug.