Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 19 Apr 2007 03:38:00 +0400
From:      "Marat N.Afanasyev" <amarat@ksu.ru>
To:        freebsd-fs@freebsd.org
Subject:   adding a fs to /etc/exports deletes noexec flag from mount output
Message-ID:  <4626ABD8.1020205@ksu.ru>

next in thread | raw e-mail | index | archive | help
Hello!

How to solve the following problem:

I have some very large filesystems that are nfs-exported to some other 
machines, they are mounted there as noexec to make sure that no 
executable will be run from them. on machines where this filesystems 
mounted via nfs with noexec option in /etc/fstab, 
/etc/periodic/security/100.chksetuid doesn't try to find chuid/suid 
files on this filesystems.

On the host machine i see that as fast as i add filesystem to 
/etc/exports 'noexec' option disappears from mount output. and i have 
either to switch off /etc/periodic/security/100.chksetuid completely, or 
wait for find to traverse entire 2T filesystems with huge amount of 
files and directories. it locks up my raid device almost completely, and 
i can read info from device only as fast as 1m per second. It's somehow 
annoying :(

is there any other ways to solve this rather than switching off 
$daily_status_security_chksetuid_enable in /etc/periodic.conf?

-- 
SY, Marat



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4626ABD8.1020205>