Subject: [nfsv4] [Editorial Errata Reported] RFC8275 (5198)

From: RFC Errata System <[email-masked]>
Date: Tue, 5 Dec 2017 12:37:18 -0800 (PST)

The following errata report has been submitted for RFC8275,
"Allowing Inheritable NFSv4 Access Control Entries to Override the Umask".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata/eid5198

--------------------------------------
Type: Editorial
Reported by: Neil Brown <[email-masked]>

Section: 1

Original Text
-------------
The same solution should work for NFS.  However, the NFSv4 protocol
   does not currently give the client a way to transmit the umask of the
   process opening a file.  And clients have no way of atomically
   checking for inheritable permissions and applying the umask only when
   necessary.  As a result, the server receives an OPEN with a mode
   attribute that already has the umask applied.

Corrected Text
--------------
Implementing a comparable solution for NFS is not currently possible.
It cannot be implemented in the server as the server does not know
the umask, and the protocol does not allow the client to tell it.
It cannot be implemented in the client as the client cannot atomically
check the inheritable permissions on the containing directory and
apply the umask selectively. As a result, the server receives an
OPEN with a mode attribute that already has the umask applied.

Notes
-----
The intent of the paragraph is obscured by clumsy language.  It is explaining how neither the server
nor the client can currently make the required decision, but this is not immediately obvious.

Instructions:
-------------
This erratum is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party  
can log in to change the status and edit the report, if necessary. 

--------------------------------------
RFC8275 (draft-ietf-nfsv4-umask-05)
--------------------------------------
Title               : Allowing Inheritable NFSv4 Access Control Entries to Override the Umask
Publication Date    : December 2017
Author(s)           : J. Fields, A. Gruenbacher
Category            : PROPOSED STANDARD
Source              : Network File System Version 4
Area                : Transport
Stream              : IETF
Verifying Party     : IESG