topic Re: Using NFS in Operating System - HP-UX

Using NFS

David Harwood — Wed, 21 Apr 2010 13:14:31 GMT

Hi,

Hope the following makes sense...

Can anybody advise as to whether it's possible to use the automounter to mount NFS shares on demand, but stop non-root users manually mounting remote filesystems under /net? The auditors are complaining.

Thanks in advance.

Re: Using NFS

Rita C Workman — Wed, 21 Apr 2010 13:35:04 GMT

A simple [ man automount ] will tell you that you can.

But...quoting the manpage on mount:

mount() can be invoked only by a user who has appropriate privileges.

You might need to consider securing things down a bit more.
For example, we run alot of SAMBA/CIFS file system shares. We deliberately set these up open to all interal users, so anybody on Windows could map to these. But the SAMBA shares we want secured we locked down to only those few users who have rights to these mountpoints.
Now for our HPUX NFS mounts, we actually have very very few of these and they are controlled by the HP Admin's only, with permissions accordingly.

Not sure if that helps...but not surprised that the auditors are complaining.

Rgrds,
Rita

Re: Using NFS

Dennis Handly — Thu, 22 Apr 2010 07:47:04 GMT

>but stop non-root users manually mounting remote filesystems under /net?

I wasn't aware they could manually mount. But the automounter will mount under /net/.

Re: Using NFS

David Harwood — Thu, 22 Apr 2010 09:16:35 GMT

Good point well made - spotted that the auditors had been created an account for their audit purposes with sudo set up. Non-root can't mount. Spent the last day looking into a non-problem.

"mount: must be root to use mount"

Thanks all for your reponses.

Re: Using NFS

David Harwood — Thu, 22 Apr 2010 09:18:53 GMT

Thanks all