From mboxrd@z Thu Jan 1 00:00:00 1970 From: Evgeniy Polyakov Subject: Re: NFS/credentials leak in 2.6.29-rc1 Date: Thu, 29 Jan 2009 17:37:53 +0300 Message-ID: <20090129143753.GA28669@ioremap.net> References: <20090120235341.GA29017@fieldses.org> <20090120114649.GA15832@ioremap.net> <20090120151125.GB24266@fieldses.org> <20090120152304.GA28592@ioremap.net> <21428.1232540589@redhat.com> <20090121123728.GA1739@ioremap.net> <20090127004955.GF20604@fieldses.org> <20090127092659.GA2646@ioremap.net> <20090127220735.GD9151@fieldses.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: David Howells , Trond Myklebust , linux-fsdevel@vger.kernel.org To: "J. Bruce Fields" Return-path: Received: from tservice.net.ru ([195.178.208.66]:47267 "EHLO tservice.net.ru" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752880AbZA2OiJ (ORCPT ); Thu, 29 Jan 2009 09:38:09 -0500 Content-Disposition: inline In-Reply-To: <20090127220735.GD9151@fieldses.org> Sender: linux-fsdevel-owner@vger.kernel.org List-ID: On Tue, Jan 27, 2009 at 05:07:35PM -0500, J. Bruce Fields (bfields@fieldses.org) wrote: > I took a closer look at the tcpdump output. Those numbers aren't port > numbers, they're rpc xid's: see "NFS Requests and Replies" in the > "OUTPUT FORMAT" section of the tcpdump man page. Or compare the output > of tcpdump with wireshark's output. Yup, they are definitely not network ports :) > That still doesn't explain why you were seeing a mount hang--but some > network or other configuration problem may be the most likely > explanation. I've rerun the tests with the latest git to date and I do not observe neither leak (with credential patch applied) nor mount fail, so please put the patch into the tree. Feel free to add my signed/acked/tested/whatevered if needed :) -- Evgeniy Polyakov