Home page logo
/

bugtraq logo Bugtraq mailing list archives

R. Thomas's NFS question
From: PETER.T.WHITING () sprint sprint com (PETER.T.WHITING () sprint sprint com)
Date: Tue, 9 May 1995 09:13:22 -0400


    R. Thomas> hostA --> exports /usr/share to -access=hostB 
    R. Thomas> hostB --> a linux box.  re-exports /usr/share to everyone
    R. Thamas> hostC --> not implicitly trusted by hostA, mounts /usr/share

    R. Thomas> aside from any security concerns, this would certainly
    R. Thomas> thrash your nfsd's.  does anyone have any experience
    R. Thomas> with this?  i have only recently discovered this, and
    R. Thomas> have not had time to peruse it in depth.

Not a problem.  Host C gets to look at ***HostB's*** /usr/share - the
one that has HostA's /usr/share mounted over it, not HostA's
/usr/share.  NFS gives you a single hop.  In the above example HostA
could then mount (if perms were granted) HostC's /usr/share and
everything would work.

pete

Peter T. Whiting
12502 Sunrise V Dr
Reston VA, 22096
Phone (703) 689-7963
Fax   (703) 689-7506
Email: Peter.T.Whiting () sprint sprint com



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]