Re: Kernel nfsd doesn't impersonate the client user?

On Fri, Jul 13, 2012 at 08:25:37AM +0200, Jens Kasten wrote:
> Could you try to set a force and or initial role for nfsd?

I see two problem with that:
1) rpc.nfsd only gives a syscall while nfsd proper is a kernel thread
2) obviously it should take the role/permission of the accessing user:P

Since I started nfsd from the command line if (1) would work it would
have the system admin role, not the boot role.

My opinion is that the main difficulty in implementing that is that,
compared to samba which uses a per user/per connection thread, kernel
nfsd uses a worker thread pool (so the same thread would have to
reimpersonate at every single request!)

Using a userspace nfs server (like unfs) works fine (but there are
issues since the client only see the 'surface' permission and denies
otherwise legit requests).

-- 
Lorenzo Marcantonio
Logos Srl