From: Yangyu Chen <redacted>
Date: Thu, 20 Jun 2024 07:04:30 +0000 (+0800)
Subject: nfs-kernel-server: do not export /mnt by default
X-Git-Url: http://git.99rst.org/?a=commitdiff_plain;h=c3232005cbc60a2a3cef9f8cbae8f3ac3ef5d19d;p=openwrt-packages.git

nfs-kernel-server: do not export /mnt by default

Currently, the nfs-kernel-server package exports /mnt by default after
it is installed. This is not a good default behavior, as it may expose
sensitive data to the network if a user mounts something on /mnt. This
commit commented out the line that exports /mnt, so the user has to
enable it explicitly.

Signed-off-by: Yangyu Chen <redacted>
---

diff --git a/net/nfs-kernel-server/Makefile b/net/nfs-kernel-server/Makefile
index e30435771..5933f6650 100644
--- a/net/nfs-kernel-server/Makefile
+++ b/net/nfs-kernel-server/Makefile
@@ -8,7 +8,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=nfs-kernel-server
 PKG_VERSION:=2.6.2
-PKG_RELEASE:=3
+PKG_RELEASE:=4
 PKG_HASH:=26d46448982252e9e2c8346d10cf13e1143e7089c866f53e25db3359f3e9493c
 
 PKG_SOURCE_URL:=@SF/nfs
diff --git a/net/nfs-kernel-server/files/nfsd.exports b/net/nfs-kernel-server/files/nfsd.exports
index 0453e04ce..0a81121f9 100644
--- a/net/nfs-kernel-server/files/nfsd.exports
+++ b/net/nfs-kernel-server/files/nfsd.exports
@@ -1 +1 @@
-/mnt	*(ro,all_squash,insecure,sync)
+# /mnt	*(ro,all_squash,insecure,sync)