Bug 1439117
| Summary: | [RFE][Future Feature] [rhel8] NFS-Ganesha in RHGS - Run as non-root user | |||
|---|---|---|---|---|
| Product: | [Red Hat Storage] Red Hat Gluster Storage | Reporter: | Marcel Hergaarden <mhergaar> | |
| Component: | nfs-ganesha | Assignee: | Patric Uebele <puebele> | |
| Status: | CLOSED ERRATA | QA Contact: | Upasana <ubansal> | |
| Severity: | medium | Docs Contact: | ||
| Priority: | medium | |||
| Version: | rhgs-3.5 | CC: | apaladug, bkunal, jthottan, kkeithle, mbenjamin, mhergaar, ndevos, pasik, pprakash, puebele, rcyriac, rhs-bugs, rvdwees, sheggodu, shilpsha, skoduri, storage-qa-internal | |
| Target Milestone: | --- | Keywords: | FutureFeature, RFE, Triaged, ZStream | |
| Target Release: | RHGS 3.5.z Batch Update 4 | |||
| Hardware: | x86_64 | |||
| OS: | Linux | |||
| Whiteboard: | ||||
| Fixed In Version: | nfs-ganesha-3.4-2.el8rhgs (rhgs-3.5.4) | Doc Type: | Enhancement | |
| Doc Text: |
With this update,`ganesha.nfsd` can be run as a non-root user. Running as a non- root user, ensures less vulnerability to privilege escalation attacks. Additionally container frameworks prefer to run daemons as non-root.
|
Story Points: | --- | |
| Clone Of: | ||||
| : | 1441131 1695079 1934533 (view as bug list) | Environment: | ||
| Last Closed: | 2021-04-29 07:21:23 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | 1926133, 1934536 | |||
| Bug Blocks: | 1657798, 1695079, 1934533 | |||
|
Description
Marcel Hergaarden
2017-04-05 09:32:02 UTC
One of the configuration options that should make it a little easier to run NFS-Ganesha as non-root, would be to have it provide only NFSv4. The need for any NFSv3 side-band protocols, or registering at rpcbind is then not needed. Only port 2049 is used in that case, which should not be a problem for an unprivileged process. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (nfs-ganesha bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2021:1463 |