Mailinglist Archive: opensuse (3156 mails)

[Joe Sloan <joe@xxxxxxxxxx>]

Anders Johansson wrote:

> It is a security risk in that it's not encrypted.
>
> Another problem is that the nfs server in versions 3 and below fully trusts 
> the client about user IDs. It won't put viruses on your machines, but it does 
> mean that if you don't control the root account on all machines, anyone can 
> read any file, or write to any share.

Nah, if you use root_squash that isn't going to happen. remote nfs root
access gets mapped to nobody, with limited rights and privileges.


Joe
-- 
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx