Patrick Goetz <[EMAIL PROTECTED]> wrote:
> I can't imagine that RedHat would allow NFS mounts from outside their
> local domain. NFS is typically regarded as a substantial security
> problem. Exporting a file system to all would be an open invitation to
> every hacker on the planet. Usually access to NFS mountable file systems
> is restricted via the /etc/exports file (linux, SunOS) or /etc/dfs/dfstab
> on Solaris.
Well, unless you're a moron and you export the partition RW ... there's really
not a security issue. You can even export the parition RW and give ANON a value
of 655354 or whatever the anonymous user is, and avoid the problem. NFS got a
bad name waybackwhen because sunos 4.x came with the root partition exported
RW to everyone by default.
If you read up a bit on NFS, you'll see that it has come a long way. Although
it's not avisable to export filesystems, if you watch what you're exporting,
there is no problem, and for some it's quite convienant. (I had AMD set up to
mount redhat's nfs partition every time I went to /amd/redhat)
Aaron
---------------------------------------------------------------------------
Send administrative requests to [EMAIL PROTECTED]
