Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Fix ACL checks for NFS kernel server
For Linux NFS kernel server ops, fsuid and fsgid in cred are populated with ids that operation is being performed as, but euid and egid remain 0. In Linux when setresuid(2) and setresgid(2) are called, the fsuid and fsgid are set to the euid and egid respectively. This PR changes ZFS ACL checks to evaluate fsuid / fsgid rather than euid / egid to avoid accidentally granting elevated permissions to NFS clients. Signed-off-by: Andrew Walker <awalker@ixsystems.com>
- Loading branch information