Re: shared NFS systems

[Kirk Strauser <kirk@strauser.com>]

"Norbert Veber" <nveber@primusolutions.net> writes:

> On Mon, Nov 27, 2000 at 09:40:40PM -0600, Kirk Strauser wrote:

> How do you get around users with local root (legitamate or
> not) nfs mounting and masquarading as other users or root?

We threaten them with beatings.  :)  In our case we weren't too
worried about that possibility.  In fact, we had a few users
with local root.  We adopted the policy of allowing users to
make changes *if* they demonstrated understanding of the
consequences, and *if* they were willing to accept full
responsibility for anything they broke.  Our office consists of
a relatively tight-knit group of developers, so we didn't have
the security concerns that others might.
-- 
Kirk Strauser