diff options
| author | Rick Macklem <rmacklem@FreeBSD.org> | 2020-11-06 16:33:42 +0000 |
|---|---|---|
| committer | Rick Macklem <rmacklem@FreeBSD.org> | 2020-11-06 16:33:42 +0000 |
| commit | 4389a5661034536b423181476cbbc6efca825055 (patch) | |
| tree | 820bdd701fa8787e1323632ffe9dcd81881d9c9c /libexec/rc/rc.conf | |
| parent | acb5785aae3e13cb78565937ed5b9c52e1f1fb7b (diff) | |
Add support for the new mountd -R option.
r376026 added a new "-R" option to mountd, which tells it to
not support the Mount protocol (not used by NFSv4) and not
register with rpcbind.
Rpcbind is considered a security issue by some sites now.
This patch adds a new yes/no variable called nfsv4_server_only.
When that is set, make vfs.nfsd.server_min_vers=4 and set "=R"
for mountd.
Setting vfs.nfsd.server_min_vers=4 tells nfsd to not register with rpcbind.
While here, add a check for "load_kld nfsd" failing to nfsd.
Reviewed by: 0mp
MFC after: 2 weeks
Differential Revision: https://reviews.freebsd.org/D26938
Notes
Notes:
svn path=/head/; revision=367423
Diffstat (limited to 'libexec/rc/rc.conf')
| -rw-r--r-- | libexec/rc/rc.conf | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/libexec/rc/rc.conf b/libexec/rc/rc.conf index 5c58c00dd5e2..d8c24853225f 100644 --- a/libexec/rc/rc.conf +++ b/libexec/rc/rc.conf @@ -380,6 +380,7 @@ rpc_ypupdated_enable="NO" # Run if NIS master and SecureRPC (or NO). keyserv_enable="NO" # Run the SecureRPC keyserver (or NO). keyserv_flags="" # Flags to keyserv (if enabled). nfsv4_server_enable="NO" # Enable support for NFSv4 +nfsv4_server_only="NO" # Set NFS server to NFSv4 only nfscbd_enable="NO" # NFSv4 client side callback daemon nfscbd_flags="" # Flags for nfscbd nfsuserd_enable="NO" # NFSv4 user/group name mapping daemon |