[6129] in RedHat Linux List

home help back first fref pref prev next nref lref last post

Re: How secure is NFS

daemon@ATHENA.MIT.EDU (Elliot Lee)
Mon Nov 25 23:35:36 1996

Date: Mon, 25 Nov 1996 23:11:31 -0500 (EST)
From: Elliot Lee <sopwith@cuc.edu>
To: redhat-list@redhat.com
In-Reply-To: <Pine.SGI.3.95.961125190428.12400A-100000@shellx.best.com>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com

On Mon, 25 Nov 1996, Prasanth Kumar wrote:

> How secure is the nfs system in redhat?

Just as secure as the NFS server on any other system is.

> I always heard the these things are easy to hack into.

They are; it's not that impossibly hard, especially if you have an account
on the target computer. This again is not Red Hat or even Linux specific,
it's just the fault of NFS's broken design.

That's what TCP Wrappers are for - use them :)

> Also are there any public nfs sites (like ftp sites)?

Now were you talking about having your computer as an NFS server or
client? Being a client doesn't have any more risks than downloading files
via FTP or etc.

I do know that ftp.uoknor.edu, a Red Hat mirror, exports its entire FTP
archive via NFS. It's so nice, with the automounter in rhl 4.0, to be able
to 'cp /net/ftp.uoknor.edu/afileiwant /tmp'.

> Since I only have one computer, I would need to connect
> to somewhere else...

You don't have to connect to anyone at all using NFS if you don't want to
:)

-- Elliot

http://www.redhat.com/


--
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
  ________________________________________________________________________
  http://www.redhat.com/RedHat-FAQ   http://www.redhat.com/RedHat-Errata
  http://www.redhat.com/RedHat-Tips  http://www.redhat.com/mailing-lists
  ------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null


home help back first fref pref prev next nref lref last post