Commit 0813c5f0 authored by Olga Kornievskaia's avatar Olga Kornievskaia Committed by Chuck Lever
Browse files

nfsd: fix access checking for NLM under XPRTSEC policies 



When an export policy with xprtsec policy is set with "tls"
and/or "mtls", but an NFS client is doing a v3 xprtsec=tls
mount, then NLM locking calls fail with an error because
there is currently no support for NLM with TLS.

Until such support is added, allow NLM calls under TLS-secured
policy.

Fixes: 4cc9b9f2 ("nfsd: refine and rename NFSD_MAY_LOCK")
Cc: stable@vger.kernel.org
Signed-off-by: default avatarOlga Kornievskaia <okorniev@redhat.com>
Reviewed-by: default avatarNeilBrown <neil@brown.name>
Reviewed-by: default avatarJeff Layton <jlayton@kernel.org>
Signed-off-by: default avatarChuck Lever <chuck.lever@oracle.com>
parent c447d2ac

fs/nfsd/export.c

+2 −1
Original line number Diff line number Diff line
@@ -1124,6 +1124,7 @@ __be32 check_nfsd_access(struct svc_export *exp, struct svc_rqst *rqstp, 
		    test_bit(XPT_PEER_AUTH, &xprt->xpt_flags))

			goto ok;

	}

	if (!may_bypass_gss)

		goto denied;



ok: