kernel-packages team mailing list archive

[Bryan Quigley <bryan.quigley@xxxxxxxxxxxxx>]

** Bug watch added: Linux Kernel Bug Tracker #93891
   http://bugzilla.kernel.org/show_bug.cgi?id=93891

** Also affects: linux via
   http://bugzilla.kernel.org/show_bug.cgi?id=93891
   Importance: Unknown
       Status: Unknown

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1424727

Title:
  NFS access not revoked on kdestroy

Status in The Linux Kernel:
  Unknown
Status in linux package in Ubuntu:
  Confirmed

Bug description:
  1) Ubuntu 14.04
  2) 3.13 kernel or mainline kernel 3.19.
  krb5-user [1.12+dfsg-2ubuntu5.1]
  nfs-common [1:1.2.8-6ubuntu1]
  3) What should happen:
  Start as unpriviledged (in a kerberos sense) user with access to a kerberos protected NFS share (in this case it contains home directories)
  kinit user1
  ls ~user1 #Test user1 permissions, this should always succeed (and does)

  kdestroy #should destroy user1 permissions

  kinit user2
  ls ~user2# this should succeed!
  ls ~user1# this should fail!

  4) What happened instead:
  After kinit user2:
  ls ~user2# this FAILS
  ls ~user1# this still WORKS

  This appears to be known upstream:
  http://www.citi.umich.edu/projects/nfsv4/linux/faq/#krb5_006

  Bits and pieces of an earlier attempt at a fix:
  http://www.spinics.net/lists/linux-nfs/msg34236.html
  nfslogin/logout prototype http://www.citi.umich.edu/projects/asci/icsi-alpha/nfs-utils-patches/1.0.10-asci-2/nfs-utils-1.0.10-asci-017-add_nfslogin.dif

  Another bug request: https://fedorahosted.org/gss-proxy/ticket/1  (and
  linked discussion)

  Workarounds:
  Unmount/Mount NFS share

To manage notifications about this bug go to:
https://bugs.launchpad.net/linux/+bug/1424727/+subscriptions