stale auxiliary GID on NFSv3 client allows files to be modified
Issue
- NFSv3 mount on the client with files read-writeable by a specific group.
- When the common GID is removed from a user and it should no longer should have read-write ability on a file/directory it had access to previously, that user is still able to modify the file.
Environment
- Red Hat Enterprise Linux (RHEL) 5, 6
- NFSv3 mount with group writeable directories.
- only local UID/GIDs are bring used from
/etc/passwd,/etc/group.
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Close
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.