#! /usr/bin/patch -p0
# $Header: /global/src/etc/cl-manage-scripts/patches/RCS/P-etc-default-autofs-ro-noexec,v 1.1 2022/08/06 17:42:32 pb22 Exp $
# patch to set vers=3,ro,noexec,sec=krb5 on herdened web servers
# patch-file matches = vers=3,ro,noexec,sec=krb5
# patch-file distmatches = Ubuntu|Debian
# Process using /usr/bin/cl-patch-file unless matching the above
--- /etc/default/autofs	2022-08-06 18:35:58.609117028 +0100
+++ /etc/default/autofs	2022-08-06 18:34:21.812286335 +0100
@@ -13,2 +13,4 @@
 #OPTIONS=""
 #
+#a1 cl.cam.ac.uk autofs mount ro (those FSs which do not have 'rw' in LDAP): vers=3 allows access to publically readable subdirectories, such as /anfs/www/html/local/committees/buildings-environment/*
+OPTIONS=" -O vers=3,ro,noexec,sec=krb5"
