Re: block root access to NFS mount



On Mon, 2006-09-11 at 14:28 -0400, Mark Haney wrote:
Okay, here's a problem I'm running in to. I have an NFS server that is
controlled via NIS for which hosts access the NFS mounts. I need to
give root access to an NFS client host machine, but /not/ the NFS
mounts. Is there any way at all to control this, other than making the
NFS mounts read only?

(Yeah I know it's a strange question, but time is pressing and I don't
have enough of it to google.) Any help would be appreciated.


By default NFS maps root to nobody. Only if the no_root_squash option
is used when exported does root from the client have root privileges on
the nfs filesystem.

Often this also means that root may not even access the nfs filesystem
at all.

HTH
"man exports" will give more info, specifically in in the User ID
Mapping section.


--
Ceterum censeo, Carthago delenda est.

Mark Haney
Sr. Systems Administrator
ERC Broadband
(828) 350-2415


--
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list



Relevant Pages

  • Re: block root access to NFS mount
    ... I need to give root access to an NFS client host machine, ... Often this also means that root may not even access the nfs filesystem ...
    (Fedora)
  • Re: Problem setting up NFS on Ubuntu
    ... I have installed Ubuntu ... > I used System - Administration - Synaptic Package Manager to include NFS ... Should I be using the GUI, and if so, how do I do that as root, ... and doesn't change the permissions displayed by ls -l ...
    (comp.os.linux.setup)
  • Re: Tools for FreeBSD development
    ... Most typically, the setup involves a central development server running -STABLE, with a private network link to a series of crash boxes. ... The development server NFS exports a file system to use as an NFS root and for file sharing, as well as running tftp and dhcp servers. ... Each test system has its own exported root, so I can use individual loader.conf's to tell test systems to boot off NFS, boot off local disks, etc. ...
    (freebsd-hackers)
  • Re: Tools for FreeBSD development
    ... Most typically, the setup involves a central development server running -STABLE, with a private network link to a series of crash boxes. ... The development server NFS exports a file system to use as an NFS root and for file sharing, as well as running tftp and dhcp servers. ... Each test system has its own exported root, so I can use individual loader.conf's to tell test systems to boot off NFS, boot off local disks, etc. ...
    (freebsd-questions)
  • Re: block root access to NFS mount
    ... controlled via NIS for which hosts access the NFS mounts. ... give root access to an NFS client host machine, ... By default NFS maps root to nobody. ...
    (Fedora)