topic Re: World Readable NFS Mounts on HPUX 11.31 in Operating System - HP-UX

World Readable NFS Mounts on HPUX 11.31

Shawn Zehnder — Mon, 02 Aug 2010 21:49:09 GMT

I'm having problems with NFS on HPUX 11.31. I can set up NFS and get it working but the security seems more dumbed down than on prior versions. Maybe it's me and I'm just not seeing it. I first noticed the /etc/exports file no longer exists so there must have been a major release on HPUX 11.31. I set up the file share using a specific user while allowing Read/Write to only two clients. Now the Read/Write works for only those two clients with that user. However, I can mount those shares as read only on any server in our domain. How do you keep NFS from exposing the shares to multiple systems? Thanks in advance for your help.
# cat /etc/dfs/sharetab
/oraprd1/reports - nfs anon=4223,sec=sys,rw=myserver.mydomain:otherserver.mydomain,ro=,window=0 none

Re: World Readable NFS Mounts on HPUX 11.31

Dennis Handly — Tue, 03 Aug 2010 02:33:47 GMT

>How do you keep NFS from exposing the shares to multiple systems?
/oraprd1/reports - nfs anon=4223,sec=sys,rw=myserver.mydomain:otherserver.mydomain,ro=,window=0 none

If you want to limit the systems with R/O access, you need to list those systems in your "ro=" list.

Re: World Readable NFS Mounts on HPUX 11.31

Shawn Zehnder — Tue, 03 Aug 2010 10:49:55 GMT

HP support responded and was very helpful. I think there's a bug in smh that's not completing the /etc/dfs/dfstab properly. I removed the extra garbage that smh added and everything seems to work. Thanks for your response.