D44906.diff
No OneTemporary
Actions

Size

1 KB

Referenced Files

None

Subscribers

None

D44906.diff
View Options

	diff --git a/libexec/rc/rc.conf b/libexec/rc/rc.conf
	--- a/libexec/rc/rc.conf
	+++ b/libexec/rc/rc.conf
	@@ -386,7 +386,7 @@
	mountd_enable="NO" # Run mountd (or NO).
	mountd_flags="-r -S" # Flags to mountd (if NFS server enabled).
	weak_mountd_authentication="NO" # Allow non-root mount requests to be served.
	-nfs_reserved_port_only="NO" # Provide NFS only on secure port (or NO).
	+nfs_reserved_port_only="YES" # Provide NFS only on secure port (or NO).
	nfs_bufpackets="" # bufspace (in packets) for client
	rpc_lockd_enable="NO" # Run NFS rpc.lockd needed for client/server.
	rpc_lockd_flags="" # Flags to rpc.lockd (if enabled).
	diff --git a/sys/fs/nfsserver/nfs_nfsdkrpc.c b/sys/fs/nfsserver/nfs_nfsdkrpc.c
	--- a/sys/fs/nfsserver/nfs_nfsdkrpc.c
	+++ b/sys/fs/nfsserver/nfs_nfsdkrpc.c
	@@ -82,7 +82,7 @@

	SYSCTL_DECL(_vfs_nfsd);

	-NFSD_VNET_DEFINE_STATIC(int, nfs_privport) = 0;
	+NFSD_VNET_DEFINE_STATIC(int, nfs_privport) = 1;
	SYSCTL_INT(_vfs_nfsd, OID_AUTO, nfs_privport, CTLFLAG_NFSD_VNET \| CTLFLAG_RWTUN,
	&NFSD_VNET_NAME(nfs_privport), 0,
	"Only allow clients using a privileged port for NFSv2, 3 and 4");