Matthew Rosewarne on 18 Jun 2007 20:59:36 -0000


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] NFS question


It is an overwhelmingly bad idea to use NFS nowadays.  The protocol is so 
inherently insecure that using it is tantamount to leaving your screen door 
unlocked in Mogadishu.  If you want to copy the odd file between machines, 
it's a much better idea to use shfs (kernel module) or sshfs (FUSE), which 
let you mount a remote directory via SSH.  Otherwise, the only reasonable 
ways to run NFS are by running it over IPSEC or by tunnelling it through SSH.  
Using shfs/sshfs is far easier and just as secure.

%!PS: Is the another way to access your files besides using root?  The 
security of using another account, possibly with ACLs, is entirely worth it.

Attachment: signature.asc
Description: This is a digitally signed message part.

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug