We are running RedHat-6.2 on a file server.
The system is now up for more than 200 days and it's main function is to
provide nfs service to almost 100 clients on two different networks.
The system has been upgraded as follows:
- nfs-utils-0.3.1-0.6.x.1
- kernel-2.4.17
I have a rather large number of exports entries for different directories.
However, a few clients only have write access as 'root' to the nfs path
as you see below.
[root]# grep no_root_squash /proc/fs/nfs/exports
/export/install 172.19.78.74(rw,no_root_squash,async,wdelay) # 172.19.78.74
/export/cern pc2376.psi.ch(rw,no_root_squash,async,wdelay) #
(129.129.70.42)
/export/csa 129.129.72.97(rw,no_root_squash,async,wdelay) #
129.129.72.97
/export/exchange 129.129.72.97(rw,no_root_squash,async,wdelay) #
129.129.72.97
Today I was very surprised (and worried), when I have noticed that
'root' from any other client can also write to the above nfs directories.
Needles to say, that this is a terrible security whole in our environment.
Thanks for any hint/help
Rene
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
NFS maillist - [email protected]
https://lists.sourceforge.net/lists/listinfo/nfs