[comp.protocols.tcp-ip] NFS security

dpl@cisunx.UUCP (David P. Lithgow) (12/07/88)

-----------
To all networking afficionados,

	I'm looking for information/scripts/code on determining the
level of security of Ultrix and other BSD-compatible systems vis-a-vis
NFS access.  I'm hoping that something is out there which would assist in
keeping this system secure against intrusion and also be a tool for new
Sun workstations coming online - to make sure that the new system
administrator has secured the appropriate partitions in /etc/exports, among
other things..

	Is /etc/exports the only nfs security mechanism between the
world and the workstation user?

	If you have any references, or experiences, please pass them
along, and I will summarize interesting results back to the net.
--
David P. Lithgow                Sr. Systems Analy./Pgmr., Univ. of Pittsburgh
USENET:  {allegra,bellcore,ihpn4!cadre,decvax!idis,psuvax1}!pitt!cisunx!dpl
CCnet(DECnet): CISVM{S123}::DPL       BITnet(Jnet):  DPL@PITTVMS

honey@mailrus.cc.umich.edu (peter honeyman) (12/07/88)

... and other oxymorons.  followup to rec.humor.

	peter

jordan@zooks.ads.com (Jordan Hayes) (12/08/88)

peter honeyman <honey@citi.umich.edu> writes:

	... and other oxymorons.

not necessarily.  certainly things along the lines of using kerberos
for the authentication and fixing your mountd and running fsirand,
etc.  go a long way toward cleaning up the nfs act on a unix box.  as
to *how* to do this, or (better) to make the stuff from sun out of the
box do this, send followups to sun!sunbugs and comp.protocols.nfs ...

/jordan