4 ms·
I remember an issue that it's security model involved trusting the client. If you exported a file system to a PC, somebody could reboot the PC with Linux to get
by incompatible 4y ago
I remember an issue that it's security model involved trusting the client. If you exported a file system to a PC, somebody could reboot the PC with Linux to get root and ignore the user permissions.
- bubblethink 4y agoI believe this can be fixed with kerberos, but in practice very few people probably deploy it that way.
- chasil 4y agoThey can get every user except root (assuming that root squash is in place). NFSv3 and below trusts any uid/gids presented by the client unless they are squashed.