Unable to mount NFSv4 shares due to Yama
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Linux |
Invalid
|
Undecided
|
Unassigned | ||
linux (Ubuntu) |
Fix Released
|
Medium
|
Kees Cook |
Bug Description
Server
Ubuntu Lucid server
Client
Ubuntu Maverick desktop
When trying to mount NFS shares provided by server, client reports:
mount.nfs4: access denied by server while mounting tony-server:/music
Client Syslog reports:
tony-desktop kernel: [13626.397677] non-matching-uid symlink following attempted in sticky world-writable directory by mount.nfs4 (fsuid 0 != 1000)
ProblemType: Bug
DistroRelease: Ubuntu 10.10
Package: nfs-common 1:1.2.2-1ubuntu1
ProcVersionSign
Uname: Linux 2.6.35-7-generic x86_64
NonfreeKernelMo
Architecture: amd64
Date: Mon Jul 12 00:15:28 2010
InstallationMedia: Ubuntu 9.10 "Karmic Koala" - Release amd64 (20091027)
ProcEnviron:
LANG=en_GB.UTF-8
SHELL=/bin/bash
SourcePackage: nfs-utils
Changed in linux (Ubuntu): | |
milestone: | none → maverick-alpha-3 |
importance: | Undecided → Medium |
summary: |
- Unable to mount NFS shares + Unable to mount NFSv4 shares due to Yama |
Solved by trial & error
(this always happens with bugs I file)
Linux 2.6.35 changes how symlinks (and presumably bind mounts) work lkml.org/ lkml/2010/ 5/30/144
detailed here
http://
Solution
change owner of my server's /nfs4exports directory from root to the primary user (UID 1000)
Bug still stands (IMO anyway), as a working config on systems up to and including Lucid is no longer valid under Maverick