From andre.albsmeier@mchp.siemens.de  Mon Jul 13 09:37:03 1998
Received: from david.siemens.de (david.siemens.de [192.35.17.14])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id JAA23948
          for <FreeBSD-gnats-submit@freebsd.org>; Mon, 13 Jul 1998 09:37:02 -0700 (PDT)
          (envelope-from andre.albsmeier@mchp.siemens.de)
Received: from salomon.siemens.de (salomon.siemens.de [139.23.33.13])
	by david.siemens.de (8.9.1/8.9.1) with ESMTP id SAA22959
	for <FreeBSD-gnats-submit@freebsd.org>; Mon, 13 Jul 1998 18:35:25 +0200 (MET DST)
Received: from curry.mchp.siemens.de (daemon@curry.mchp.siemens.de [146.180.31.23])
	by salomon.siemens.de (8.9.1/8.9.1) with ESMTP id SAA02355
	for <FreeBSD-gnats-submit@freebsd.org>; Mon, 13 Jul 1998 18:35:49 +0200 (MET DST)
Received: (from daemon@localhost)
	by curry.mchp.siemens.de (8.8.8/8.8.8) id SAA17286
	for <FreeBSD-gnats-submit@freebsd.org>; Mon, 13 Jul 1998 18:36:47 +0200 (CEST)
Message-Id: <199807131636.SAA17239@internal>
Date: Mon, 13 Jul 1998 18:36:44 +0200 (CEST)
From: Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
To: FreeBSD-gnats-submit@freebsd.org
Subject: mountpoint on NFS server can be removed by NFS client
X-Send-Pr-Version: 3.2

>Number:         7272
>Category:       kern
>Synopsis:       mountpoint on NFS server can be removed by NFS client
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Jul 13 09:40:00 PDT 1998
>Closed-Date:    Tue Sep 29 18:54:08 PDT 1998
>Last-Modified:  Tue Sep 29 18:55:31 PDT 1998
>Originator:     Andre Albsmeier
>Release:        FreeBSD 2.2.6-STABLE i386
>Organization:
>Environment:

two FreeBSD 2.2.6-STABLE  machines; one NFS server and one client

>Description:

Machine S is the NFS server, machine C is the client.

On S we mount /dev/sd2c on /test:

	root@S:> mount /dev/sd2c /test

In /test we have a directory test2 and we mount /dev/sd3c on /test/test2:

	root@S:> mount /dev/sd3c /test/test2

/test is properly exported to C. On the client we mount /test from the server:

	root@C:> mount S:/test /mnt

Then we (accidently) remove test2 on the client:

	root@C:> rmdir /mnt/test2

and it is gone... Sure this is no normal operation but IMHO it should not
be allowed since it could be done accidently. There is even no simple
way to recover from this (apart from reboot, any ideas?).


>How-To-Repeat:

	see above

>Fix:
	
	Don't know.
>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: mckusick 
State-Changed-When: Tue Sep 29 18:54:08 PDT 1998 
State-Changed-Why:  
Fixed in revision 1.100 of /sys/ufs/ufs/ufs_vnops.c. Thanks for the bug report. 
>Unformatted:
