Re: [Bug 966734] [NEW] nfs4 allows writes by incorrect users

2012-03-27 Thread Steve Langasek
Hi Toby, On Wed, Mar 28, 2012 at 01:28:14AM -, Toby Corkindale wrote: > The bug in question involves using nfs v4 with the idmapd, with users with > the same username but differing uids across the client and server. The > idmapping appears to have worked, until you try to write to the > dire

[Bug 966734] [NEW] nfs4 allows writes by incorrect users

2012-03-27 Thread Toby Corkindale
*** This bug is a security vulnerability *** Public security bug reported: I've observed this bug on Ubuntu Precise (beta) and Oneiric, and also on Debian Squeeze and Debian Testing. (Kernel versions 2.6.32, 3.0.0 and 3.2.0) I've found numerous forum posts around the internet from confused users