[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Security issues for nfs mount



> 
> Hi,
> 
> I was wondering whether there is anything to worry about if I let 
> another machine nfs mount, read only, root-squash, one directory on my
> machine. Any help will be greatly appreciated.

The only problem I can think of is that root-squash may not be enough
(an attacker may still read files owned by "shadow", etc). So

/tmp    hostname(ro,squash_uids=0-100,squash_gids=0-80)

may be slightly more safe. But after that, I don't anticipate any
problems. 

If anyone still knows problems with that, I'd be interested to hear!


-- 
joost witteveen, joostje@debian.org
#!/usr/bin/perl -sp0777i<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<j]dsj
$/=unpack('H*',$_);$_=`echo 16dio\U$k"SK$/SM$n\EsN0p[lN*1
lK[d2%Sa2/d0$^Ixp"|dc`;s/\W//g;$_=pack('H*',/((..)*)$/)
#what's this? see http://www.dcs.ex.ac.uk/~aba/rsa/


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-user-request@lists.debian.org . 
Trouble?  e-mail to templin@bucknell.edu .


Reply to: