Blame SOURCES/nfs-utils-1.3.0-systemd-nfs-man.patch

64c563
diff -up nfs-utils-1.3.0/systemd/nfs.systemd.man.orig nfs-utils-1.3.0/systemd/nfs.systemd.man
64c563
--- nfs-utils-1.3.0/systemd/nfs.systemd.man.orig	2018-07-21 06:10:06.938288975 -0400
64c563
+++ nfs-utils-1.3.0/systemd/nfs.systemd.man	2018-07-21 06:10:18.888434798 -0400
64c563
@@ -79,7 +79,7 @@ unit should be enabled.
64c563
 Several other units which might be considered to be optional, such as
64c563
 .I rpc-gssd.service
64c563
 are careful to only start if the required configuration file exists.
64c563
-.I rpc-gsdd.service
64c563
+.I rpc-gssd.service
64c563
 will not start if the
64c563
 .I krb5.keytab
64c563
 file does not exist (typically in
64c563
@@ -120,10 +120,11 @@ be needed to reduce system load to an ab
64c563
 attack surface by not running daemons that are not absolutely
64c563
 required.
64c563
 .PP
64c563
-Two particular services which this can apply to are
64c563
-.I rpcbind
64c563
+Three particular services which this can apply to are
64c563
+.IR rpcbind ,
64c563
+.IR idmapd ,
64c563
 and
64c563
-.IR idmapd .
64c563
+.IR rpc-gssd .
64c563
 .I rpcbind
64c563
 is not part of the
64c563
 .I nfs-utils
64c563
@@ -155,6 +156,15 @@ is not needed and not wanted, it can be
64c563
 .RS
64c563
 .B systemctl mask idmapd
64c563
 .RE
64c563
+.I rpc-gssd
64c563
+is assumed to be needed if the
64c563
+.I krb5.keytab
64c563
+file is present.  If a site needs this file present but does not want
64c563
+.I rpc-gssd
64c563
+running, it can be masked with
64c563
+.RS
64c563
+.B systemctl mask rpc-gssd
64c563
+.RE
64c563
 .SH FILES
64c563
 /etc/nfs.conf
64c563
 .br