[CentOS] 'Best' Platform

[Florian La Roche]

> Are there by chance bugzilla entries for those?
> Just out of curiosity - NFSV4 is an area of interest to us, in the future.

Have you checked the newest kernel from the last few days? It has a few nfs
fixes included:

$ rpm -q --changelog kernel-2.6.32-279.22.1.el6.x86_64 | head -100 | egrep '(^\*|nfs)'
* Tue Feb 05 2013 Johnny Hughes <johnny at centos.org> [2.6.32-279.22.1.el6.centos]
* Sun Jan 13 2013 Frantisek Hrbata <fhrbata at redhat.com> [2.6.32-279.22.1.el6]
- [fs] nfs: Properly handle the case where the delegation is revoked (Steve Dickson) [846840 842435]
- [fs] nfs: Move cl_delegations to the nfs_server struct (Steve Dickson) [846840 842435]
- [fs] nfs: Introduce nfs_detach_delegations() (Steve Dickson) [846840 842435]
- [fs] nfs: Fix a number of RCU issues in the NFSv4 delegation code (Steve Dickson) [846840 842435]
* Mon Jan 07 2013 Frantisek Hrbata <fhrbata at redhat.com> [2.6.32-279.21.1.el6]
* Thu Jan 03 2013 Frantisek Hrbata <fhrbata at redhat.com> [2.6.32-279.20.1.el6]
* Sat Nov 24 2012 Frantisek Hrbata <fhrbata at redhat.com> [2.6.32-279.19.1.el6]
* Sat Nov 17 2012 Frantisek Hrbata <fhrbata at redhat.com> [2.6.32-279.18.1.el6]
- [net] nfs: Fix buffer overflow checking in __nfs4_get_acl_uncached (Frantisek Hrbata) [811794 822871] {CVE-2012-2375}
- [net] nfs: Fix the acl cache size calculation (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
- [net] nfs: Fix range checking in __nfs4_get_acl_uncached and __nfs4_proc_set_acl (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
- [net] nfs: nfs_getaclargs.acl_len is a size_t (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
- [net] nfs: Don't use private xdr_stream fields in decode_getacl (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
- [net] nfs: Fix pointer arithmetic in decode_getacl (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
- [net] nfs: Simplify the GETATTR attribute length calculation (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
- [fs] nfs: Avoid beyond bounds copy while caching ACL (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
- [fs] nfs: Avoid reading past buffer when calling GETACL (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
* Wed Nov 14 2012 Frantisek Hrbata <fhrbata at redhat.com> [2.6.32-279.17.1.el6]


I see NFS4 geeting used more and more, but still many production sites staying on NFSv3.

greetings,

Florian La Roche