Questions tagged [nfs]
NFS, or Network File System, is an open distributed file system protocol initially developed by Sun Microsystems. It first appeared in SunOS in 1985 but is now supported in a wide range of operating systems.
14
questions
1
vote
1
answer
149
views
SUID Binary Doesn't Work - TryHackMe
In the TryHackMe's machine, there are some NFS shares that no_root_squash is enabled which allows attacker to create malicious SUID binary on the share with root privileges.
I mounted share ...
- 11
1
vote
1
answer
131
views
NFS4+Kerberos: Is the client authenticated?
Imagine the following scenario: A company network with "domain joined" linux clients (e.g they have a HOST$@DOMAIN.LOCAL principal in their keytabs file + A computer entry in the DC).
Now an ...
- 13
4
votes
1
answer
8k
views
What is insecure about the "insecure" option of NFS exports?
Why is it considered insecure for an NFS export to allow connections originating from high ports? Compare the manual:
exportfs understands the following export options:
secure
This option requires ...
- 200
2
votes
1
answer
768
views
Why is autofs insecure?
I am hardening CentOS/RHEL 7.6. The hardening documents recommend disabling the automounter, "unless it is necessary."
Why is autofs such a problem?
One of the benefits of networking is a shared file ...
- 244
0
votes
1
answer
367
views
Ransomware on Mycloud NAS
I own a Mycloud NAS and it was affected by ransomware.
In the NAS there are several folders, most of them are password protected. There is also the "Public" folder which can be seen by all users and ...
- 11
1
vote
1
answer
125
views
Any known risks with Elastic File System?
I want to give some of my clients the ability to write files via SFTP, which later I can read from my main server.
Since I'm using EC2, to do so I simply opened an Elastic File System (EFS) and ...
- 125
2
votes
1
answer
376
views
Secure Authentication options for NFS
Are there any Secure Authentication for NFS other than Kerberos?
- 213
2
votes
1
answer
513
views
On NFSv4 with kerberos security
When NFSv4 is configured to use kerberos authentication is mandatory to have a keytab installed on every client with is own principal. To access files a user still needs to be authenticated with his ...
- 201
0
votes
0
answers
183
views
What are the risks of sharing disk storage by NFS by two machines in different security zones?
In order to share files between two systems, an IT department has decided to share disk storage in a SAN device. The volumes are shared by NFS. The two machines mount the same volume in the SAN.
The ...
- 1,507
29
votes
2
answers
64k
views
Security risk of opening port 111 (rpcbind)?
As far as I understood rpcbind is used for listing active services, and telling the requesting client where to send the RPC request. If a host listens on port 111, one can use rpcinfo to get program ...
- 905
3
votes
0
answers
2k
views
NFS IP spoofing
I am using VirtualBox: where the guest is an Arch ISO and the host Windows/Cygwin or a generic Linux.
For sharing host folders, VB native shared folders is not an option (since the setup requires ...
- 845
7
votes
3
answers
1k
views
Is it a bad idea to share the ssh host key in a diskless environment?
I am looking at this cluster of student work stations. They are diskless clients which boot from NFS. They also have sshd enabled.
All of these machines share the same ssh host key (rsa,dsa,etc), ...
user46168
8
votes
1
answer
4k
views
Can auditd track events that occured over NFS
I have multiple servers mounting a NFS shared called /opt/WHATEVER from Server X.
Server X has auditd enables with rule:
sudo /sbin/auditctl -w /opt/WHATEVER -p rwxa
When events occur on Server X ...
- 81
2
votes
1
answer
2k
views
NFS and encrypted File systems
Can a NFS mounted file system be used for encrypted /home, and can the encrypted Home Directories be mounted/decrypted for the user when they login?
- 267