[2109] in Info-AFS_Redistribution
Re: AFS exposure through NFS translator
daemon@ATHENA.MIT.EDU (Jim.Rees@umich.edu)
Wed Oct 20 13:03:27 1993
From: Jim.Rees@umich.edu
To: rick@msc.cornell.edu
Cc: info-afs@transarc.com (AFS Mailing List)
Date: Wed, 20 Oct 93 11:18:33 EDT
In-Reply-To: rick@msc.cornell.edu, Wed, 20 Oct 93 08:58:46 EDT
Given that it has been demonstrated that an arbitrary host can (with a
degree of difficulty which depends on several obscure factors) mount
read/write an NFS filesystem to which it is not granted access, what
does this imply for the security of files in an AFS filesystem.
This is one of the many reasons why it's a bad idea to use NFS, even just to
access an AFS translator. I never use NFS, and never apply IP address acls,
so I have no exposure through the NFS translators.