Re: 711 and nfs

From: David M. (dave_matthew_at_yahoo.com)
Date: 12/21/03

  • Next message: Nico Kadel-Garcia: "Re: Proftpd and TLS" 
    Date: Sun, 21 Dec 2003 17:24:50 GMT

    On Sun, 21 Dec 2003 07:59:56 -0800, albatros66 wrote:

    [...]

    > And this in not (in any case) NFS related. But I have binary-executable
    > which one should only bae able to execute, but on a nfs filesystem can
    > also be copied by anyony (security!!!)

    On an NFS version three file-system, if you have permission to execute a
    file, then you also have permission to read it; the reason for this is
    explained in section 4.4 of RFC 1813 (NFS Version Three Protocol
    Specification).

    > AL

  • Next message: Nico Kadel-Garcia: "Re: Proftpd and TLS"

    Relevant Pages

    • Re: Minimal directories needed to boot (WAS: Re: How to obtain network information?)
      ... a regular user can execute it by ... Don't trust "man hier". ... There's a difference between NFS mounting and local mounting here. ... whether the name is root or furple. ...
      (alt.os.linux.suse)
    • Re: 711 and nfs
      ... If not how should I mount filesystem in order to use NFS ... > - present a file to a client when the client has read or exec ... > NFS3_ACCESS or performing looking at the actual file permissions prior ... it's not that difficult to read a file you can only execute ...
      (comp.os.linux.security)
    • Re: 711 and nfs
      ... > On an NFS version three file-system, if you have permission to execute a ... then you also have permission to read it; the reason for this is ... Do you know if NFS version 2 also has this ...
      (comp.os.linux.security)
    • Re: 711 and nfs
      ... > On my RH, Slack, and FreeBSD, a file that's not readable won't be executed: ... > executable by the nfs client? ... And this in not NFS related. ... But I have binary-executable which one should only bae able to execute, ...
      (comp.os.linux.security)
    • Re: hi,a question
      ... Works over NFS (NFS allows "reading" for files with have the execute bit ... set; it also allows writign of read only files by the owner; both are ... Doesn't work for script. ...
      (comp.unix.solaris)
    • Quantcast