Bug#869662: gvfs-backends: gvfs-nfs not possible to mount nfs exports with option secure

[Stefan Tatschner]

Package: gvfs-backends
Version: 1.30.4-1+b1
Severity: important

Dear Maintainer,

it is not possible to mount an nfs share using nautilus (which in turn uses
gvfs-nfs) that is exported with the "secure" option. The nfs secure option is
the default for nfs exports. It means, that the nfs server does not accept connections
from an unprivileged source port (portno < 1024).

A typical user might expect that gvfs-nfs just works with the default settings.

There are two solutions for this problem:

- Establish the connection as root. => Is only sand for mount from the commandline
- Set the cap_net_bind_service capability on the binary "/usr/lib/gvfs/gvfsd-nfs"

https://mail.gnome.org/archives/gvfs-list/2016-November/msg00010.html
https://bugs.archlinux.org/task/44431
https://github.com/sahlberg/libnfs/blob/df94ae931aca5ea40e68e9e43e93410457ea7c34/README#L89

I suggest to add the said capability to the binary in order to make the gvfs-nfs backend work properly.


Stefan


-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.11.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages gvfs-backends depends on:
ii  dconf-gsettings-backend [gsettings-backend]  0.26.0-2+b1
ii  gvfs                                         1.30.4-1+b1
ii  gvfs-common                                  1.30.4-1
ii  gvfs-daemons                                 1.30.4-1+b1
ii  gvfs-libs                                    1.30.4-1+b1
ii  libarchive13                                 3.2.2-2
ii  libatk1.0-0                                  2.24.0-1
ii  libavahi-client3                             0.6.32-2
ii  libavahi-common3                             0.6.32-2
ii  libavahi-glib1                               0.6.32-2
ii  libc6                                        2.24-12
ii  libcairo-gobject2                            1.14.10-1
ii  libcairo2                                    1.14.10-1
ii  libcap2                                      1:2.25-1
ii  libcdio-cdda1                                0.83-4.3+b1
ii  libcdio-paranoia1                            0.83-4.3+b1
ii  libcdio13                                    0.83-4.3+b1
ii  libgcrypt20                                  1.7.8-2
ii  libgdata22                                   0.17.8-1
ii  libgdk-pixbuf2.0-0                           2.36.5-2
ii  libglib2.0-0                                 2.52.3-1
ii  libgoa-1.0-0b                                3.22.5-1
ii  libgphoto2-6                                 2.5.14-1
ii  libgphoto2-port12                            2.5.14-1
ii  libgtk-3-0                                   3.22.16-1
ii  libgudev-1.0-0                               230-3
ii  libimobiledevice6                            1.2.0+dfsg-3.1
ii  libjson-glib-1.0-0                           1.2.8-1
ii  libmtp9                                      1.1.13-1
ii  libnfs8                                      1.11.0-2
ii  libpango-1.0-0                               1.40.6-1
ii  libpangocairo-1.0-0                          1.40.6-1
ii  libplist3                                    2.0.0-2
ii  libpolkit-gobject-1-0                        0.105-18
ii  libsecret-1-0                                0.18.5-3.1
ii  libsmbclient                                 2:4.6.5+dfsg-4
ii  libsoup2.4-1                                 2.56.0-2
ii  libxml2                                      2.9.4+dfsg1-3
ii  psmisc                                       23.1-1

Versions of packages gvfs-backends recommends:
ii  gnome-keyring  3.20.1-1

Versions of packages gvfs-backends suggests:
ii  bluez-obexd   5.45-1
ii  samba-common  2:4.6.5+dfsg-4

-- no debconf information