+++ /dev/null
-Index: nfs-utils-1.0.10/support/nfs/exports.c
-===================================================================
---- nfs-utils-1.0.10.orig/support/nfs/exports.c
-+++ nfs-utils-1.0.10/support/nfs/exports.c
-@@ -39,12 +39,13 @@ int export_errno;
- static char *efname = NULL;
- static XFILE *efp = NULL;
- static int first;
-+static int has_default_opts, has_default_subtree_opts;
- static int *squids = NULL, nsquids = 0,
- *sqgids = NULL, nsqgids = 0;
-
- static int getexport(char *exp, int len);
- static int getpath(char *path, int len);
--static int parseopts(char *cp, struct exportent *ep, int warn);
-+static int parseopts(char *cp, struct exportent *ep, int warn, int *had_subtree_opt_ptr);
- static int parsesquash(char *list, int **idp, int *lenp, char **ep);
- static int parsenum(char **cpp);
- static int parsemaptype(char *type);
-@@ -68,7 +69,7 @@ setexportent(char *fname, char *type)
- struct exportent *
- getexportent(int fromkernel, int fromexports)
- {
-- static struct exportent ee;
-+ static struct exportent ee, def_ee;
- char exp[512], *hostname;
- char rpath[MAXPATHLEN+1];
- char *opt, *sp;
-@@ -78,31 +79,36 @@ getexportent(int fromkernel, int fromexp
- return NULL;
-
- freesquash();
-- ee.e_flags = EXPORT_DEFAULT_FLAGS;
-- /* some kernels assume the default is sync rather than
-- * async. More recent kernels always report one or other,
-- * but this test makes sure we assume same as kernel
-- * Ditto for wgather
-- */
-- if (fromkernel) {
-- ee.e_flags &= ~NFSEXP_ASYNC;
-- ee.e_flags &= ~NFSEXP_GATHERED_WRITES;
-- }
-- ee.e_maptype = CLE_MAP_IDENT;
-- ee.e_anonuid = 65534;
-- ee.e_anongid = 65534;
-- ee.e_squids = NULL;
-- ee.e_sqgids = NULL;
-- ee.e_mountpoint = NULL;
-- ee.e_nsquids = 0;
-- ee.e_nsqgids = 0;
-
- if (first || (ok = getexport(exp, sizeof(exp))) == 0) {
-- ok = getpath(ee.e_path, sizeof(ee.e_path));
-+ has_default_opts = 0;
-+ has_default_subtree_opts = 0;
-+
-+ def_ee.e_flags = EXPORT_DEFAULT_FLAGS;
-+ /* some kernels assume the default is sync rather than
-+ * async. More recent kernels always report one or other,
-+ * but this test makes sure we assume same as kernel
-+ * Ditto for wgather
-+ */
-+ if (fromkernel) {
-+ def_ee.e_flags &= ~NFSEXP_ASYNC;
-+ def_ee.e_flags &= ~NFSEXP_GATHERED_WRITES;
-+ }
-+ def_ee.e_maptype = CLE_MAP_IDENT;
-+ def_ee.e_anonuid = 65534;
-+ def_ee.e_anongid = 65534;
-+ def_ee.e_squids = NULL;
-+ def_ee.e_sqgids = NULL;
-+ def_ee.e_mountpoint = NULL;
-+ def_ee.e_nsquids = 0;
-+ def_ee.e_nsqgids = 0;
-+
-+ ok = getpath(def_ee.e_path, sizeof(def_ee.e_path));
- if (ok <= 0)
- return NULL;
-- strncpy (ee.m_path, ee.e_path, sizeof (ee.m_path) - 1);
-- ee.m_path [sizeof (ee.m_path) - 1] = '\0';
-+
-+ strncpy (def_ee.m_path, def_ee.e_path, sizeof (def_ee.m_path) - 1);
-+ def_ee.m_path [sizeof (def_ee.m_path) - 1] = '\0';
- ok = getexport(exp, sizeof(exp));
- }
- if (ok < 0) {
-@@ -111,6 +117,23 @@ getexportent(int fromkernel, int fromexp
- return NULL;
- }
- first = 0;
-+
-+ /* Check for default options */
-+ if (exp[0] == '-') {
-+ if (parseopts(exp + 1, &def_ee, 0, &has_default_subtree_opts) < 0)
-+ return NULL;
-+
-+ has_default_opts = 1;
-+
-+ ok = getexport(exp, sizeof(exp));
-+ if (ok < 0) {
-+ xlog(L_ERROR, "expected client(options...)");
-+ export_errno = EINVAL;
-+ return NULL;
-+ }
-+ }
-+
-+ ee = def_ee;
-
- /* Check for default client */
- if (ok == 0)
-@@ -130,7 +153,8 @@ getexportent(int fromkernel, int fromexp
- }
- *sp = '\0';
- } else {
-- xlog(L_WARNING, "No options for %s %s: suggest %s(sync) to avoid warning", ee.e_path, exp, exp);
-+ if (!has_default_opts)
-+ xlog(L_WARNING, "No options for %s %s: suggest %s(sync) to avoid warning", ee.e_path, exp, exp);
- }
- if (strlen(hostname) >= sizeof(ee.e_hostname)) {
- syntaxerr("client name too long");
-@@ -140,7 +164,7 @@ getexportent(int fromkernel, int fromexp
- strncpy(ee.e_hostname, hostname, sizeof (ee.e_hostname) - 1);
- ee.e_hostname[sizeof (ee.e_hostname) - 1] = '\0';
-
-- if (parseopts(opt, &ee, fromexports) < 0)
-+ if (parseopts(opt, &ee, fromexports && !has_default_subtree_opts, NULL) < 0)
- return NULL;
-
- /* resolve symlinks */
-@@ -293,7 +317,7 @@ mkexportent(char *hname, char *path, cha
- ee.e_path[sizeof (ee.e_path) - 1] = '\0';
- strncpy (ee.m_path, ee.e_path, sizeof (ee.m_path) - 1);
- ee.m_path [sizeof (ee.m_path) - 1] = '\0';
-- if (parseopts(options, &ee, 0) < 0)
-+ if (parseopts(options, &ee, 0, NULL) < 0)
- return NULL;
- return ⅇ
- }
-@@ -301,7 +325,7 @@ mkexportent(char *hname, char *path, cha
- int
- updateexportent(struct exportent *eep, char *options)
- {
-- if (parseopts(options, eep, 0) < 0)
-+ if (parseopts(options, eep, 0, NULL) < 0)
- return 0;
- return 1;
- }
-@@ -310,7 +334,7 @@ updateexportent(struct exportent *eep, c
- * Parse option string pointed to by cp and set mount options accordingly.
- */
- static int
--parseopts(char *cp, struct exportent *ep, int warn)
-+parseopts(char *cp, struct exportent *ep, int warn, int *had_subtree_opt_ptr)
- {
- int had_subtree_opt = 0;
- char *flname = efname?efname:"command line";
-@@ -461,6 +485,8 @@ out:
-
- flname, flline,
- ep->e_hostname, ep->e_path);
-+ if (had_subtree_opt_ptr)
-+ *had_subtree_opt_ptr = had_subtree_opt;
-
- return 1;
- }
-Index: nfs-utils-1.0.10/utils/exportfs/exports.man
-===================================================================
---- nfs-utils-1.0.10.orig/utils/exportfs/exports.man
-+++ nfs-utils-1.0.10/utils/exportfs/exports.man
-@@ -22,6 +22,11 @@ client may be immediately followed by a
- list of export options for that client. No whitespace is permitted
- between a client and its option list.
- .PP
-+Also, each line may have one or more specifications for default options
-+after the path name, in the form of a dash ("\-") followed by an option
-+list. The option list is used for all subsequent exports on that line
-+only.
-+.PP
- Blank lines are ignored. A pound sign ("#") introduces a comment to the
- end of the line. Entries may be continued across newlines using a
- backslash. If an export name contains spaces it should be quoted using
-@@ -502,6 +507,7 @@ is supposedly that of user joe).
- /usr *.local.domain(ro) @trusted(rw)
- /home/joe pc001(rw,all_squash,anonuid=150,anongid=100)
- /pub (ro,insecure,all_squash)
-+/srv/www \-sync,rw server @trusted @external(ro)
- '''/pub/private (noaccess)
- .fi
- .PP
-@@ -515,6 +521,9 @@ under the nobody account. The
- .I insecure
- option in this entry also allows clients with NFS implementations that
- don't use a reserved port for NFS.
-+The sixth line exports a directory read-write to the machine 'server'
-+as well as the `@trusted' netgroup, and read-only to netgroup `@external',
-+all three mounts with the `sync' option enabled.
- ''' The last line denies all NFS clients
- '''access to the private directory.
- '''.SH CAVEATS