[30] in linux-security and linux-alert archive

home help back first fref pref prev next nref lref last post

Re: NFS server

daemon@ATHENA.MIT.EDU (Carl V Streeter)
Mon Mar 6 22:00:47 1995

From: Carl V Streeter <streeter@cae.wisc.edu>
To: linux-security@tarsier.cv.nrao.edu
Date: Mon, 06 Mar 1995 20:45:52 CST
In-Reply-To: <m0rlihL-000KjTC@monad.swb.de>; from "Olaf Kirch" at Mar 6, 95 8:44 pm
Reply-To: linux-security@tarsier.cv.nrao.edu

> 
> 
> I'll see if I can put together a patch tonight for this and upload a
> new server to some site. I'll also put in the root_squash fix posted
> recently. While we're at it, are there any other known holes?
> 
Be careful.  If it's the patch I've tried, it implements root_squash,
but no no_root_squash.  Ie. there is NO root access to NFS drives.
On a net with controlled physical access, this seems silly.

--
Carl Streeter             |  "Nothing is more frightening than 
streeter@cae.wisc.edu     |    ignorance in action"   --Goethe 
Just another Perl hacker  |  ...Have you seen my saltshaker?
CAE Consultant            |  http://www.engr.wisc.edu/~streeter/

home help back first fref pref prev next nref lref last post