commit 1269bc69b6649282091bb7007372acf4ab8357fd
author J. Bruce Fields <bfields@citi.umich.edu> Tue Jul 17 04:04:52 2007 -0700
committer Linus Torvalds <torvalds@woody.linux-foundation.org> Tue Jul 17 10:23:08 2007 -0700
tree 58cd434f7381332dd8b7331da36f98b40cb69639
parent 9091224f3cff4721f295df29e8a99705a63bc4c7

knfsd: nfsd: enforce per-flavor id squashing

Allow root squashing to vary per-pseudoflavor, so that you can (for example)
allow root access only when sufficiently strong security is in use.

Signed-off-by: "J. Bruce Fields" <bfields@citi.umich.edu>
Signed-off-by: Neil Brown <neilb@suse.de>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

include/linux/nfsd/export.h

diff --git a/include/linux/nfsd/export.h b/include/linux/nfsd/export.h
index a01f775..78feb7b 100644
--- a/include/linux/nfsd/export.h
+++ b/include/linux/nfsd/export.h
@@ -43,7 +43,8 @@
 #define NFSEXP_ALLFLAGS		0xFE3F
 
 /* The flags that may vary depending on security flavor: */
-#define NFSEXP_SECINFO_FLAGS	0
+#define NFSEXP_SECINFO_FLAGS	(NFSEXP_READONLY | NFSEXP_ROOTSQUASH \
+					| NFSEXP_ALLSQUASH)
 
 #ifdef __KERNEL__