Sponsored Content
Operating Systems Solaris User with read-only to entire filesystem Post 303012587 by Peasant on Tuesday 6th of February 2018 11:34:20 AM
Old 02-06-2018
Yes, If you share the share with root permissions.
I haven't actually tried to export the entire filesystem hierarchy via NFS...

Even with ro permission, the user will see all the files on the system, including password hashes from operating system files, host keys etc.

This should not be done as it compromises system security in so many ways ...

Auditors should not have or require access to those important security files.
If required, you should provide those files with hashes replaced/blanked.

Only if the requirement of audit is to compromise the trust of the server and its users.

Hope that helps
Regards
Peasant.
This User Gave Thanks to Peasant For This Post:
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

/ filesystem is mounted read only

how do you fsck the / filesystem? I know it does it automatically the next time I boot up following a switch on the wall shutdown but is there a flad somewhere that forces this on next boot up? Thanks (2 Replies)
Discussion started by: DGK
2 Replies

2. UNIX for Advanced & Expert Users

Read the entire output fired by ps command

Actually I want to display the entire output fired by ps command. My output gets trucated after 80 chars. Thus, i am not able to see the entire command running when i give a ps -eaf .... Does anyone know how do i display the entire output fired by ps command .. (i.e the command along with... (5 Replies)
Discussion started by: vinithepoo
5 Replies

3. Shell Programming and Scripting

How to Read the entire file using while loop

Guys, I am trying to read the whole file using while loop but when i run the ssh part of the script it reads only the first line and exit after that. There are in total 134 lines in the file, but when the output is redirected, it does only for one line and comes to command prompt. pls help..... (11 Replies)
Discussion started by: sdosanjh
11 Replies

4. Shell Programming and Scripting

Accessing entire line during "while read"

I am using the time-honored construct "while read field1 field2 field3 ; do" to pull delimited fields from lines of data in a file, but there are a few places within the loop where I need to manipulate the entire, unsplit line of data. Does "while read" keep each entire record/line somewhere prior... (2 Replies)
Discussion started by: fitzwilliam
2 Replies

5. UNIX for Dummies Questions & Answers

How to read entire output from a file?

Hello- I am trying to view a file which is quite large. However, whenever I do 'cat (file name)' it shows me just the half.. I am using Putty to access my server. Also, is it possible to edit a file from a unix system on a 'Gedit for Windows" text editor? Thanks (7 Replies)
Discussion started by: DallasT
7 Replies

6. AIX

Mount Filesystem in AIX Unable to read /etc/filesystem

Dear all, We are facing prolem when we are going to mount AIX filesystem, the system returned the following error 0506-307The AFopen call failed : A file or directory in the path name does not exist. But when we ls filesystems in the /etc/ directory it show -rw-r--r-- 0 root ... (2 Replies)
Discussion started by: m_raheelahmed
2 Replies

7. Shell Programming and Scripting

Help with Bash piped while-read and a read user input at the same time

Hi I am new to writing script and want to use a Bash Piped while-read and read from user input. if something happens on server.log then do while loop or if something happend on user input then do while loop. Pseudocode something like: tail -n 3 -f server.log | while read serverline || read... (8 Replies)
Discussion started by: MyMorris
8 Replies

8. UNIX for Dummies Questions & Answers

Change the entire filesystem

Hi everyone, I've installed RedHat 5 enterprise into a VirtualBox, but some how i can't eve create a single file, cause appear u message like this: Read-only filesystem. i'm logged as root. Any idea (6 Replies)
Discussion started by: Newer
6 Replies

9. Shell Programming and Scripting

Bash script read specific value from files of an entire folder

Hello, I heva a problem creating a script that read specifc value from all the files of an entire folder I have a number of email files into a directory and i need to extrect from each file 2 specific values. After that i have to put them into a new file that looks like that: To: value1 ... (1 Reply)
Discussion started by: ahmenty
1 Replies

10. Solaris

Solaris 10 - Filesystem become read only suddenly

Hi, i just started few days ago to face the problem when the whole system is getting freeze. By freeze i mean: * server is reachable (via network) * i cannot connect to server via SSH or Telnet(when try to use SSH or telnet it will find server, try to connect, but it freeze after... (4 Replies)
Discussion started by: frankosun
4 Replies
share(1M)																 share(1M)

NAME
share - make local resource available for mounting by remote systems SYNOPSIS
share [-F FSType] [-o specific_options] [-d description] [pathname] The share command exports, or makes a resource available for mounting, through a remote file system of type FSType. If the option -F FSType is omitted, the first file system type listed in /etc/dfs/fstypes is used as default. For a description of NFS specific options, see share_nfs(1M). pathname is the pathname of the directory to be shared. When invoked with no arguments, share displays all shared file sys- tems. -F FSType Specify the filesystem type. -o specific_options The specific_options are used to control access of the shared resource. (See share_nfs(1M) for the NFS specific options.) They may be any of the following: rw pathname is shared read/write to all clients. This is also the default behavior. rw=client[:client]... pathname is shared read/write only to the listed clients. No other systems can access pathname. ro pathname is shared read-only to all clients. ro=client[:client]... pathname is shared read-only only to the listed clients. No other systems can access pathname. Separate multiple options with commas. Separate multiple operands for an option with colons. See . -d description The -d flag may be used to provide a description of the resource being shared. Example 1: Sharing a Read-Only Filesystem This line will share the /disk file system read-only at boot time. share -F nfs -o ro /disk Example 2: Invoking Multiple Options The following command shares the filesystem /export/manuals, with members of the netgroup having read-only access and users on the speci- fied host having read-write access. share -F nfs -o ro=netgroup_name,rw=host1:host2:host3 /export/manuals /etc/dfs/dfstab list of share commands to be executed at boot time /etc/dfs/fstypes list of file system types, NFS by default /etc/dfs/sharetab system record of shared file systems See attributes(5) for descriptions of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +-----------------------------+-----------------------------+ |Availability |SUNWcsu | +-----------------------------+-----------------------------+ mountd(1M), nfsd(1M), share_nfs(1M), shareall(1M), unshare(1M), attributes(5) Export (old terminology): file system sharing used to be called exporting on SunOS 4.x, so the share command used to be invoked as exportfs(1B) or /usr/sbin/exportfs. If share commands are invoked multiple times on the same filesystem, the last share invocation supersedes the previous--the options set by the last share command replace the old options. For example, if read-write permission was given to usera on /somefs, then to give read- write permission also to userb on /somefs: example% share -F nfs -o rw=usera:userb /somefs This behavior is not limited to sharing the root filesystem, but applies to all filesystems. 9 Dec 2004 share(1M)
All times are GMT -4. The time now is 08:59 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy