Unix- TCP/IP Security (10)
NFS - Network File System
- allows directories physically located on one system (file server) to be mounted on another (client)
- user’s UID and GID are sent from the client to the server to determine access privileges
- server must export directories to allow access by clients (/etc/exports, /etc/dfs/dfstab, /etc/exportfs)
- client must mount: /etc/mount, /etc/fstab
- /etc/exports : root=host:... - allow remote superuser (UID=0) access to listed hosts (bad !)