On Thu, 7 Nov 2002, Ed Wilts wrote:

> NFS absolutely trusts the client not to lie to it.  There is *no*
> authentication done whatsoever.  If the client tells the server that
> it's uid/gid is 0/0, the server trusts it.  For this reason, you should

This is what root_squash (on by default) and all_squash are for. You're
right to say that it can't authenticate the UID/GID, but that doesn't mean
people can run rampant on NFS if it's been properly configured.

-- 
"Whenever I feel blue, I start breathing again."

                               - Unknown




-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@;redhat.com?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to