From bb3b742c8b2d62981015f74f18a49d21270e2b9153b771d2963fb1369056ada6 Mon Sep 17 00:00:00 2001 From: Dominique Leuenberger Date: Tue, 31 Oct 2017 15:18:12 +0000 Subject: [PATCH] - Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS servers default to a mode where they do not allow non-system ports from connecting. These servers require to use the "insecure" export option in /etc/exports in order to allow libnfs clients to be able to connect. Allow the usage of privileged ports for the gvfsd-nfs executable to not require the "insecure" option on the server (bsc#1065864). OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/gvfs?expand=0&rev=286 --- gvfs.changes | 11 +++++++++++ gvfs.spec | 3 ++- 2 files changed, 13 insertions(+), 1 deletion(-) diff --git a/gvfs.changes b/gvfs.changes index bbb9f9c..7ca405a 100644 --- a/gvfs.changes +++ b/gvfs.changes @@ -1,3 +1,14 @@ +------------------------------------------------------------------- +Tue Oct 31 14:31:25 UTC 2017 - tbechtold@suse.com + +- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS + servers default to a mode where they do not allow non-system + ports from connecting. These servers require to use the + "insecure" export option in /etc/exports in order to allow libnfs + clients to be able to connect. Allow the usage of privileged + ports for the gvfsd-nfs executable to not require the "insecure" + option on the server (bsc#1065864). + ------------------------------------------------------------------- Mon Oct 2 18:26:16 UTC 2017 - zaitor@opensuse.org diff --git a/gvfs.spec b/gvfs.spec index a4f0429..1826f9b 100644 --- a/gvfs.spec +++ b/gvfs.spec @@ -322,7 +322,8 @@ find %{buildroot}%{_libdir} -type f -name '*.la' -delete -print %{_libexecdir}/%{name}/gvfsd-network %{_datadir}/%{name}/mounts/network.mount %if 0%{?is_opensuse} -%{_libexecdir}/%{name}/gvfsd-nfs +# allow priv ports for mounting nfs . Otherwise the nfs-service requires insecure +%caps(cap_net_bind_service=+ep) %{_libexecdir}/%{name}/gvfsd-nfs %{_datadir}/%{name}/mounts/nfs.mount %endif %if !0%{?is_opensuse}