svn commit: r346858 - projects/nfsv42/sys/fs/nfsserver

[Rick Macklem]

Author: rmacklem
Date: Sun Apr 28 23:46:01 2019
New Revision: 346858
URL: https://svnweb.freebsd.org/changeset/base/346858

Log:
  Add the standard check for V4 root security to nfsrvd_allocate().

Modified:
  projects/nfsv42/sys/fs/nfsserver/nfs_nfsdserv.c

Modified: projects/nfsv42/sys/fs/nfsserver/nfs_nfsdserv.c
==============================================================================
--- projects/nfsv42/sys/fs/nfsserver/nfs_nfsdserv.c	Sun Apr 28 23:39:19 2019	(r346857)
+++ projects/nfsv42/sys/fs/nfsserver/nfs_nfsdserv.c	Sun Apr 28 23:46:01 2019	(r346858)
@@ -5108,6 +5108,10 @@ nfsrvd_allocate(struct nfsrv_descript *nd, __unused in
 	nfsquad_t clientid;
 	nfsattrbit_t attrbits;
 
+	if (nfs_rootfhset == 0 || nfsd_checkrootexp(nd) != 0) {
+		nd->nd_repstat = NFSERR_WRONGSEC;
+		goto nfsmout;
+	}
 	NFSM_DISSECT(tl, uint32_t *, NFSX_STATEID + 2 * NFSX_HYPER);
 	stp->ls_flags = (NFSLCK_CHECK | NFSLCK_WRITEACCESS);
 	lop->lo_flags = NFSLCK_WRITE;