topic NFS Share User Mountable in Operating System - HP-UX

NFS Share User Mountable

dictum9 — Mon, 14 Mar 2016 16:12:06 GMT

I got this ACAS scan vulnerability #15984

NFS Share User Mountable

https://www.tenable.com/plugins/index.php?view=single&id=15984

their solution:

configure NFS so that only authorized hosts can mount the remote shares

My /etc/dfs/dfstab reads like this:

share -F nfs -o anon=-1,root=xxxx.xxxxx.xxxxx,rw=xxxx.xxxxx.xxxxx /xyz

I thought that anon=-1 should be enough to fix this problem. I changed anon=0 to anon=-1 , re-exported, but after re-running the scan, the vulnerability returned.

Re: NFS Share User Mountable

Dennis Handly — Mon, 14 Mar 2016 18:13:45 GMT

>I changed anon=0 to anon=-1 , re-exported, but after re-running the scan, the vulnerability returned.

Typically anon is is set to -2, for nobody.

Also, perhaps the scan wants you to limit the ro= users too?

Re: NFS Share User Mountable

dictum9 — Mon, 14 Mar 2016 20:31:27 GMT

I will make changes and re-run the scan.