Blame SOURCES/nfs-utils-1.3.0-systemd-nfs-man.patch

6006dc
diff -up nfs-utils-1.3.0/systemd/nfs.systemd.man.orig nfs-utils-1.3.0/systemd/nfs.systemd.man
6006dc
--- nfs-utils-1.3.0/systemd/nfs.systemd.man.orig	2018-07-21 06:10:06.938288975 -0400
6006dc
+++ nfs-utils-1.3.0/systemd/nfs.systemd.man	2018-07-21 06:10:18.888434798 -0400
6006dc
@@ -79,7 +79,7 @@ unit should be enabled.
6006dc
 Several other units which might be considered to be optional, such as
6006dc
 .I rpc-gssd.service
6006dc
 are careful to only start if the required configuration file exists.
6006dc
-.I rpc-gsdd.service
6006dc
+.I rpc-gssd.service
6006dc
 will not start if the
6006dc
 .I krb5.keytab
6006dc
 file does not exist (typically in
6006dc
@@ -120,10 +120,11 @@ be needed to reduce system load to an ab
6006dc
 attack surface by not running daemons that are not absolutely
6006dc
 required.
6006dc
 .PP
6006dc
-Two particular services which this can apply to are
6006dc
-.I rpcbind
6006dc
+Three particular services which this can apply to are
6006dc
+.IR rpcbind ,
6006dc
+.IR idmapd ,
6006dc
 and
6006dc
-.IR idmapd .
6006dc
+.IR rpc-gssd .
6006dc
 .I rpcbind
6006dc
 is not part of the
6006dc
 .I nfs-utils
6006dc
@@ -155,6 +156,15 @@ is not needed and not wanted, it can be
6006dc
 .RS
6006dc
 .B systemctl mask idmapd
6006dc
 .RE
6006dc
+.I rpc-gssd
6006dc
+is assumed to be needed if the
6006dc
+.I krb5.keytab
6006dc
+file is present.  If a site needs this file present but does not want
6006dc
+.I rpc-gssd
6006dc
+running, it can be masked with
6006dc
+.RS
6006dc
+.B systemctl mask rpc-gssd
6006dc
+.RE
6006dc
 .SH FILES
6006dc
 /etc/nfs.conf
6006dc
 .br