Bug 99662 - rpc.rquotad(8): quota information leak while rpc.rquotad is used
Summary: rpc.rquotad(8): quota information leak while rpc.rquotad is used
Status: Open
Alias: None
Product: Base System
Classification: Unclassified
Component: bin (show other bugs)
Version: 6.0-RELEASE
Hardware: Any Any
: Normal Affects Only Me
Assignee: freebsd-bugs (Nobody)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-06-30 20:20 UTC by Jui-Nan Lin
Modified: 2017-12-31 22:37 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Jui-Nan Lin 2006-06-30 20:20:14 UTC 
When I try to query other user's quota in the NFS server, it told me
"quota: /raid/quota.user: Permission denied". But when I try to query
other user's quota in the NFS client, it will return his/her quota.

Fix: 

In FreeBSD 4.x, the problem is solved by checking uid in
src/usr.bin/quota/quota.c. But I think it would be better if we check the
uid in the rpc.rquotad. But I am not familiar with SUNRPC, and I don't
know if there will be the uid information transmitted in the RPC
request/reponse.
How-To-Repeat: nfsserver% quota -v someuser
quota: /raid/quota.user: Permission denied
nfsclient% quota -v someuser
Disk quotas for user someuser (uid xxxxx):
     Filesystem   usage   quota   limit   grace   files   quota   limit   grace
      /amd/raid   17178  120000  150000            1406   12000   15000
Comment 1 Eitan Adler freebsd_committer freebsd_triage 2017-12-31 07:59:56 UTC 
For bugs matching the following criteria:

Status: In Progress Changed: (is less than) 2014-06-01

Reset to default assignee and clear in-progress tags.

Mail being skipped