Re: knfsd export problems

Alan Cox (alan@lxorguk.ukuu.org.uk)
Sat, 13 Dec 1997 16:39:30 +0000 (GMT)


> I checked with Olaf Kirch on this a while back, and he seemed to think
> it would be better not to change the behavior. It's apparently tricky
> from a security standpoint to keep each mount within its own sandbox if
> you allow multiple directories from one fs to be exported. (I haven't
> looked into it that closely yet.)

Exporting subdirectories yes - but exporting the same thing to differnet
machines ?

With regards to keeping things in subtrees the dentry stuff may make this
much easier dentries seem to make it realtively easy to ask

is_child_on(dentry,dentry)

with inodes you are sort of stuck which is why BSD and most other platforms
only allow export of filesystems not subtrees

Alan