Questions tagged [nfs]

NFS, or Network File System, is an open distributed file system protocol initially developed by Sun Microsystems. It first appeared in SunOS in 1985 but is now supported in a wide range of operating systems.

1
vote
1answer
95 views

Why is autofs insecure?

I am hardening CentOS/RHEL 7.6. The hardening documents recommend disabling the automounter, "unless it is necessary." Why is autofs such a problem? One of the benefits of networking is a shared file ...
0
votes
0answers
120 views

Ransomware on Mycloud NAS

I own a Mycloud NAS and it was affected by ransomware. In the NAS there are several folders, most of them are password protected. There is also the "Public" folder which can be seen by all users and ...
1
vote
1answer
81 views

Any known risks with Elastic File System?

I want to give some of my clients the ability to write files via SFTP, which later I can read from my main server. Since I'm using EC2, to do so I simply opened an Elastic File System (EFS) and ...
2
votes
1answer
269 views

Secure Authentication options for NFS

Are there any Secure Authentication for NFS other than Kerberos?
2
votes
1answer
348 views

On NFSv4 with kerberos security

When NFSv4 is configured to use kerberos authentication is mandatory to have a keytab installed on every client with is own principal. To access files a user still needs to be authenticated with his ...
0
votes
0answers
107 views

What are the risks of sharing disk storage by NFS by two machines in different security zones?

In order to share files between two systems, an IT department has decided to share disk storage in a SAN device. The volumes are shared by NFS. The two machines mount the same volume in the SAN. The ...
16
votes
1answer
41k views

Security risk of opening port 111 (rpcbind)?

As far as I understood rpcbind is used for listing active services, and telling the requesting client where to send the RPC request. If a host listens on port 111, one can use rpcinfo to get program ...
2
votes
0answers
963 views

NFS IP spoofing

I am using VirtualBox: where the guest is an Arch ISO and the host Windows/Cygwin or a generic Linux. For sharing host folders, VB native shared folders is not an option (since the setup requires ...
7
votes
3answers
786 views

Is it a bad idea to share the ssh host key in a diskless environment?

I am looking at this cluster of student work stations. They are diskless clients which boot from NFS. They also have sshd enabled. All of these machines share the same ssh host key (rsa,dsa,etc), ...
5
votes
1answer
2k views

Can auditd track events that occured over NFS

I have multiple servers mounting a NFS shared called /opt/WHATEVER from Server X. Server X has auditd enables with rule: sudo /sbin/auditctl -w /opt/WHATEVER -p rwxa When events occur on Server X ...
2
votes
1answer
1k views

NFS and encrypted File systems

Can a NFS mounted file system be used for encrypted /home, and can the encrypted Home Directories be mounted/decrypted for the user when they login?