Hi. Attached is a patch which addresses a possible DoS attack using the nfsservctl() system call. A user can use this system call to fill up the file system which stores kernel messages, thus causing potential problems and/or hiding more valuable messages. This can happen because the arguments to the nfsservctl() system call are versioned. This is a good thing. However, when a bad version is detected, the kernel prints a message and then returns an error. I presume that this message was meant to be used to help to detect mis- matches between the kernel and nfs-utils, but the message does not really contain enough information to be useful in this fashion. The solution is to remove the message and just return the error. A mis-match between the kernel and nfs-utils can be determined in other ways, ways that don't lead to DoS attacks. While I was there, I corrected some error handling on the compat version of the nfsservctl() system. It was detecting errors while copying in the arguments from user space, but then attempting to use the arguments anyway. This didn't seem so good. Thanx... ps Signed-off-by: Peter Staubach