Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.kernel > #94599

Bug#1151866: nfs-common: host= setting in nfs.conf inadaquate

Cross-posted to 2 groups.

Show all headers | View raw

Package: nfs-common
Version: 1:2.8.3-1

The "host=" setting in /etc/nfs.conf isn't fit for the function it needs
to perform.  Of note it doesn't allow binding to multiple addresses.  It
also doesn't allow restricting to binding IPv4-only nor IPv6-only.  In
fact I was unable to get it to restrict IPv6 binding at all.

Multiple addresses is a common configuration.  Disabling IPv4 or IPv6
are also common.

It also appears stopping/starting `/etc/init.d/nfs-kernel-server` appears
to leave old address bindings in place.  If the "host=" setting is added,
then the daemon is restarted it will remain bound to the wildcard
address.

NFS is a service which should be filtered at firewalls, but it should
still be possible to restrict binding as a backup security measure.  I'm
tempted to rate this as pretty high importance.


-- 
(\___(\___(\______          --=> 8-) EHM <=--          ______/)___/)___/)
 \BS (    |         ehem+sigmsg@m5p.com  PGP 87145445         |    )   /
  \_CS\   |  _____  -O #include <stddisclaimer.h> O-   _____  |   /  _/
8A19\___\_|_/58D2 7E3D DDF4 7BA6 <-PGP-> 41D1 B375 37D0 8714\_|_/___/5445

Back to linux.debian.kernel | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#1151866: nfs-common: host= setting in nfs.conf inadaquate Elliott Mitchell <ehem+debian@m5p.com> - 2026-10-24 04:00 +0200
  Processed: Re: Bug#1151866: nfs-common: host= setting in nfs.conf  inadaquate "Debian Bug Tracking System" <owner@bugs.debian.org> - 2026-10-29 07:30 +0100
  Bug#1151866: nfs-common: host= setting in nfs.conf inadaquate Salvatore Bonaccorso <carnil@debian.org> - 2026-10-29 07:30 +0100
    Bug#1151866: nfs-common: host= setting in nfs.conf inadaquate Elliott Mitchell <ehem+debian@m5p.com> - 2026-10-31 02:30 +0100
  Bug#1151866: nfs-common: host= setting in nfs.conf inadaquate Uwe Kleine-König <ukleinek@debian.org> - 2026-11-04 22:50 +0100

csiph-web