[OpenAFS] pts problem

Derrick J Brashear shadow@dementia.org
Tue, 9 Sep 2003 17:23:28 -0400 (EDT)


On Tue, 9 Sep 2003, Tim C. wrote:


> Warning: Id hash for ceduc369 (id 32766) seems correct at the db;
> rehashing it anyway
> Failed to update entry ceduc369 (err=267269)
>
>   I've never seen the "Failed to update entry..." error before, and
> neither has one of my colleages familiar with afs.  This action used to
translate_et 267269
267269 (pt).5 = Permission denied

Guess: we fixed the pr debug interface to not let anyone read information
from it, and ptclient was somehow using it for something for which it
can't now.

I?t was a security hole in that anyone could read stuff from your ptserver
even if the pts acls disallowed it.