[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1109999: marked as done ([nfs-common] default option (${STATDOPTS}) is not used)

Your message dated Tue, 29 Jul 2025 01:20:08 +0200
with message-id <f358aacc2e8e144927914bfb86757dfa3afe03ae.camel@decadent.org.uk>
and subject line Re: [nfs-common] default option (${STATDOPTS}) is not used
has caused the Debian Bug report #1109999,
regarding [nfs-common] default option (${STATDOPTS}) is not used
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1109999: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1109999
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: nfs-common
Version: 1:2.8.3-1
Severity: grave

Dear mainteners,
In order to increase (a little !) security, and as defined into http://wiki.debian.org/SecuringNFS, it is a good practice to defined one static port for nfs-stad daemon.
This feature is available in the man. Furthermore, it is implemented into /etc/default/nfs-common into variable STATDOPTS.
But is seems that /etc/init/nfs-common script has forgotten to use this variable when launching daemon. As a result it is not possible to change ANY option available for this daemon. 


On debian bookwoorm, it works.
Find following diff bettween Bookworm and Trixie

 diff /tmp/nfs-common-trixie /tmp/nfs-common-bookworm
22a23
> RPCGSSDOPTS=
30c31
< [ -x /usr/sbin/rpc.statd ] || exit 0
---
> [ -x /sbin/rpc.statd ] || exit 0
42c43
<     while read -r DEV _ _ OPTS _
---
>     while read DEV MTPT FSTYPE OPTS REST
89c90
<     if [ -x /sbin/modprobe ] && [ -f /proc/modules ]
---
>     if [ -x /sbin/modprobe -a -f /proc/modules ]
136c137
<               --exec /usr/sbin/rpc.statd
---
>               --exec /sbin/rpc.statd -- $STATDOPTS



Best regards
--
  -- Jean-Marc LACROIX  () --
    -- mailto : jeanmarc.lacroix@free.fr   --

--- End Message ---
--- Begin Message --- 
On Sun, 27 Jul 2025 23:43:10 +0200 Jean-Marc LACROIX
<jeanmarc.lacroix@free.fr> wrote:
[...] 
> But is seems that /etc/init/nfs-common script has forgotten to use this 
> variable when launching daemon. As a result it is not possible to change 
> ANY option available for this daemon.
[...]

This change was already announced in bookworm:

nfs-utils (1:2.6.1-1) unstable; urgency=medium
 
  On systems running systemd, changes to command-line options in
  /etc/default/nfs-common or /etc/default/nfs-kernel-server will now
  be ignored.  All those options can instead be set in /etc/nfs.conf
  or /etc/nfs.conf.d/; see nfs.conf(5).
 
  If either of the files in /etc/default has been changed, the
  command-line options will be converted on upgrade to the file
  /etc/nfs.conf.d/local.conf.
 
  A future update to nfs-utils will remove the command-line options
  in /etc/default entirely, so even on systems not using systemd
  you should make changes in /etc/nfs.conf.d/ instead.
 
 -- Ben Hutchings <benh@debian.org>  Sun, 13 Mar 2022 19:55:09 +0100

Ben.

-- 
Ben Hutchings
Design a system any fool can use, and only a fool will want to use it.

Attachment: signature.asc
Description: This is a digitally signed message part


--- End Message ---
Reply to: