Re: SSH Newbie Questions: SSH and NFS-exported user homes

On Fri, 14 Sep 2007 17:18:54 -0700, Nico <nkadel@xxxxxxxxx> wrote:
On 14 Sep, 20:34, Ignoramus19284 <ignoramus19...@xxxxxxxxxxxxxxxxxxxx>
wrote:
I do that at home. It is as secure as NFS is.

Just add your public key to authorized_keys, that's all.

i

As secure as NFS is, is.... a fairly poor recommendation. It's known
as "No F***ing Security" for good reasons. It's far too easy in most
setups for a root user on an NFS client to pretend to be any other NFS
user, and gain access to the entire contents of their home directory.
This applies especailly to SSH private keys and SSH authorized_keys
files.

That root can get any file of the user, is nothing specificaklly
related to ssh.

You'll need to think very, very carefully about how you handle keys in
such an environment.


yep.

i
.

Relevant Pages