freebsd-src/libexec/rc
Mark Johnston 6d5ce2bb63 nfsserver: Default to nfs_reserved_port_only="YES"
This setting causes the NFS server to check that all RPCs are sent from
a privileged (<= 1023) port, rejecting those that are not.  This
slightly raises the bar for a user with network access to an
unauthenticated NFS server to access exported NFS filesystems.

Users that use traditional NFS clients (e.g., those provided by FreeBSD
or Linux) should not see any difference, assuming that unprivileged
filesystem mounting is disallowed.

Note that the setting is per-VNET, so may be overridden in VNET jails
without affecting the rest of the system.

Discussed with:	freebsd-arch@
Reviewed by:	rmacklem, bz, emaste
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D44906
2024-04-23 12:54:46 -04:00
..
rc.d package: move cron into its own package 2024-04-22 22:36:35 -06:00
tests spdx: The BSD-2-Clause-FreeBSD identifier is obsolete, drop -FreeBSD 2023-05-12 10:44:03 -06:00
debug.sh /etc/rc add trace debug and verify 2024-02-09 09:15:58 -08:00
Makefile /etc/rc add trace debug and verify 2024-02-09 09:15:58 -08:00
netstart libexec: Remove ancient SCCS tags. 2023-11-26 22:23:28 -07:00
network.subr Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
pccard_ether Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
rc /etc/rc add trace debug and verify 2024-02-09 09:15:58 -08:00
rc.bsdextended Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
rc.conf nfsserver: Default to nfs_reserved_port_only="YES" 2024-04-23 12:54:46 -04:00
rc.firewall Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
rc.initdiskless rc.initdiskless: Disable soft-updates in mdmfs (again) 2024-03-20 00:54:18 -04:00
rc.resume Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
rc.shutdown Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
rc.subr rc.subr add Exists so we can find sed 2024-02-12 14:39:20 -08:00
rc.suspend Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
safe_eval.sh rc.subr add Exists so we can find sed 2024-02-12 14:39:20 -08:00