[2109] in Info-AFS_Redistribution

home help back first fref pref prev next nref lref last post

Re: AFS exposure through NFS translator

daemon@ATHENA.MIT.EDU (Jim.Rees@umich.edu)
Wed Oct 20 13:03:27 1993

From: Jim.Rees@umich.edu
To: rick@msc.cornell.edu
Cc: info-afs@transarc.com (AFS Mailing List)
Date: Wed, 20 Oct 93 11:18:33 EDT
In-Reply-To: rick@msc.cornell.edu, Wed, 20 Oct 93 08:58:46 EDT

  Given that it has been demonstrated that an arbitrary host can (with a
  degree of difficulty which depends on several obscure factors) mount
  read/write an NFS filesystem to which it is not granted access, what
  does this imply for the security of files in an AFS filesystem.

This is one of the many reasons why it's a bad idea to use NFS, even just to
access an AFS translator.  I never use NFS, and never apply IP address acls,
so I have no exposure through the NFS translators.

home help back first fref pref prev next nref lref last post