28.9 Security Loopholes

28.9.4 NFS mounts

When mounting file systems via NFS, if you can't trust the system you're mounting from, always make sure you mount the file systems with the nosuid, or don't mount it. This prevents anyone from running suid programs from those file systems.

# mount -o nosuid,bg,intr untrusted:/home /u_home

Unix System Administration - 8 AUG 1996

[Next] [Previous] [Up] [Top] [Contents]