October 2022
Intermediate to advanced
500 pages
19h 57m
English
book
Security Strategies in Linux Platforms and Applications, 3rd Edition
by Ric Messier, Michael Jang
Content preview from Security Strategies in Linux Platforms and Applications, 3rd Edition
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
Hardening NFS as If It Were Local
Versions of NFS prior to version 4 (NSFv4) may have been more susceptible to unauthorized users gaining access to systems. Before NFSv4, there was no user-based authentication. As such, a user with a system on the local network could connect to NFS directories shared with that network. If that NFS share included a user home directory, all the user needed to do was to set up a client system with the appropriate username and ID number on the local client system. He or she could then get full access to the other user’s home directory files through the remote share.
That has changed with the help of Kerberos, which can at least authenticate client systems. So, a malicious user with a portable system won’t be able ...