nfs-kernel-server: do not export /mnt by default
authorYangyu Chen <cyy@cyyself.name>
Thu, 20 Jun 2024 07:04:30 +0000 (15:04 +0800)
committerRosen Penev <rosenp@gmail.com>
Sun, 23 Jun 2024 18:10:59 +0000 (11:10 -0700)
Currently, the nfs-kernel-server package exports /mnt by default after
it is installed. This is not a good default behavior, as it may expose
sensitive data to the network if a user mounts something on /mnt. This
commit commented out the line that exports /mnt, so the user has to
enable it explicitly.

Signed-off-by: Yangyu Chen <cyy@cyyself.name>
net/nfs-kernel-server/Makefile
net/nfs-kernel-server/files/nfsd.exports

index e30435771f982515852bb8b3f52e48b4798efa58..5933f66500e2b50408ec158c68f621823a8d671a 100644 (file)
@@ -8,7 +8,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=nfs-kernel-server
 PKG_VERSION:=2.6.2
-PKG_RELEASE:=3
+PKG_RELEASE:=4
 PKG_HASH:=26d46448982252e9e2c8346d10cf13e1143e7089c866f53e25db3359f3e9493c
 
 PKG_SOURCE_URL:=@SF/nfs
index 0453e04ce408371d63102f422d38e1dd541a6daf..0a81121f91e2dd28c9c51f10a489450fe3624b5a 100644 (file)
@@ -1 +1 @@
-/mnt   *(ro,all_squash,insecure,sync)
+# /mnt *(ro,all_squash,insecure,sync)