72.What are the server and client security considerations?
Ans.
Server security considerations:
1. Always use the root_squash option in /etc/exports.
2. Enabled by default so do not disable it.
3. With root squashing clients root account can’t even access or change files that only server’s root account can change or access.
Client security considerations:
1. Disable SUID (set UID) programs on NFS mounts using nosuid option.
2. Prevents server’s root account from creating an SUID root program on an exported FS, logging in to the clients as a normal user, and then using the UID root program to become root on the client.
Comments
Post a Comment