opnsense-src/libexec
Mark Johnston 6d5ce2bb63 nfsserver: Default to nfs_reserved_port_only="YES"
This setting causes the NFS server to check that all RPCs are sent from
a privileged (<= 1023) port, rejecting those that are not.  This
slightly raises the bar for a user with network access to an
unauthenticated NFS server to access exported NFS filesystems.

Users that use traditional NFS clients (e.g., those provided by FreeBSD
or Linux) should not see any difference, assuming that unprivileged
filesystem mounting is disallowed.

Note that the setting is per-VNET, so may be overridden in VNET jails
without affecting the rest of the system.

Discussed with:	freebsd-arch@
Reviewed by:	rmacklem, bz, emaste
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D44906
2024-04-23 12:54:46 -04:00
..
atf Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
atrun Purge more stray embedded $FreeBSD$ strings 2023-09-25 07:54:56 -07:00
blacklistd-helper Track upstream project rename in contrib/blocklistd 2023-11-03 16:53:04 -04:00
bootpd bootpd(8): Fix a typo in a source code comment 2024-01-22 21:46:31 +01:00
comsat Remove copyright strings ifdef'd out 2023-11-26 22:23:58 -07:00
dma dma.conf: Fix typo 2024-03-27 10:37:22 -04:00
fingerd Remove copyright strings ifdef'd out 2023-11-26 22:23:58 -07:00
flua flua: add fbsd module 2023-09-27 16:00:00 +02:00
ftpd libexec: Automated cleanup of cdefs and other formatting 2023-11-26 22:23:59 -07:00
getty libexec: Automated cleanup of cdefs and other formatting 2023-11-26 22:23:59 -07:00
hyperv Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
kgdb crashinfo: Print stack traces for all on-CPU threads 2024-01-15 16:36:40 -05:00
mail.local libexec: Remove ancient SCCS tags. 2023-11-26 22:23:28 -07:00
makewhatis.local Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
mknetid libexec: Automated cleanup of cdefs and other formatting 2023-11-26 22:23:59 -07:00
nuageinit nuageinit: add basic support for cloudinit. 2024-03-15 09:22:16 +01:00
phttpget libexec: Automated cleanup of cdefs and other formatting 2023-11-26 22:23:59 -07:00
pppoed Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
rbootd libexec: Automated cleanup of cdefs and other formatting 2023-11-26 22:23:59 -07:00
rc nfsserver: Default to nfs_reserved_port_only="YES" 2024-04-23 12:54:46 -04:00
revnetgroup Purge more stray embedded $FreeBSD$ strings 2023-09-25 07:54:56 -07:00
rpc.rquotad libexec: Automated cleanup of cdefs and other formatting 2023-11-26 22:23:59 -07:00
rpc.rstatd libexec: Automated cleanup of cdefs and other formatting 2023-11-26 22:23:59 -07:00
rpc.rusersd Purge more stray embedded $FreeBSD$ strings 2023-09-25 07:54:56 -07:00
rpc.rwalld Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
rpc.sprayd Purge more stray embedded $FreeBSD$ strings 2023-09-25 07:54:56 -07:00
rtld-elf rtld(1): minor clarification for LD_STATIC_TLS_EXTRA 2024-04-20 16:50:27 +03:00
rtld-elf32 Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
save-entropy save-entropy: Add manual page 2023-09-18 13:33:59 +02:00
smrsh libexec: Remove ancient SCCS tags. 2023-11-26 22:23:28 -07:00
talkd libexec: Automated cleanup of cdefs and other formatting 2023-11-26 22:23:59 -07:00
tcpd Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
tests Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
tftp-proxy Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
tftpd libexec: Automated cleanup of cdefs and other formatting 2023-11-26 22:23:59 -07:00
ulog-helper Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
ypxfr Remove $FreeBSD$: two-line nroff pattern 2023-08-16 11:55:10 -06:00
Makefile nuageinit: add basic support for cloudinit. 2024-03-15 09:22:16 +01:00
Makefile.inc libexec: Remove ancient SCCS tags. 2023-11-26 22:23:28 -07:00