I am in the middle of a security audit (Soalris 10) and have been given the following directives regarding my dfstab file:
The SA will ensure the NFS server is configured to deny client access requests that do not include a userid.
The SA will ensure access to exported filesystems is restricted to local hosts via the export configuration file.
My dfstab file looks like this:
Regarding item #1, I think it has something to do w/ the sec=<mode> option, but I can't say for sure.
Regarding item #2, the security report implied it was a dfstab problem because it showed the dfstab output as needing modification, but the verbiage suggests another file is involved.
Any help would be greatly appreciated. Thanks in advance.
Help with parsing regex in tripwire:
the rule is" This test verifies that all exported file systems found in /etc/exports specify a fully qualified domain name containing "thecss.com" or a NIS netgroup.."
regex that does not work is :
... (1 Reply)
Help with parsing regex in tripwire:
the rule is" This test verifies that exported file systems do not have the "root=<host>" option specified."
regex that does not work is :
^.*-o+(?=root=\S+|\S+,root=\S+).*
the dfstab looks like this :
# cat /etc/dfs/dfstab
# Place... (1 Reply)
1.) I am to write scripts that will be phasetest folder in the home directory.
2.) The folder should have a set-up,phase and display files
I have written a small script which i used to check for the existing users and their password.
What I need help with:
I have a set of questions in a... (19 Replies)
Hey guys,
I've seen this posted a few times when i searched but I kinda want to know the cleanest way of doing it.
On Solaris 8 and Solaris 9
What is the best way to disable telnet ssh1 and remote root login premanently?
I've seen posts that say edit /etc/services edit this edit that... (3 Replies)
Solaris 8.
So i updated dfstab and added computer2.acme.com i.e:
share -F nfs rw=computer1.acme.com,computer2.acme.com /export/home
how do I get the daemon to recognize the change, without kicking computer1.acme.com off?
kill -HUP
or
/etc/init.d/nfsd stop
/etc/init.d/nfsd start
or... (1 Reply)
exports(4) Kernel Interfaces Manual exports(4)NAME
exports, xtab - directories to export to NFS clients
SYNOPSIS DESCRIPTION
The file is obsolete and has been replaced by the new NFS file Please see dfstab(4) for more details.
The file is also obsolete and has been replaced by the new NFS file Please see sharetab(4) for more details.
The and the files are no longer used to export NFS directories. Any modifications made to these files will have no impact on NFS.
These manpages will be removed from future releases of HP-UX.
AUTHOR
was developed by Sun Microsystems, Inc.
FILES
list of commands to be executed at boot time
system record of shared file systems
list of hostnames
list of network groups
network information
script that executes
command.
SEE ALSO share(1M), mountd(1M), nfsd(1M), dfstab(4), hosts(4), netgroup(4), networks(4), sharetab(4).
TO BE OBSOLETED exports(4)