NFS share options


Login or Register to Reply

 
Thread Tools Search this Thread
# 1  
Old 10-01-2007
NFS share options

Hello,

I'm doing a Perl script to parse the dfstab file and find dangerous configurations (rw to everyone, root access, etc). My question is, if I have a share command like this:

Code:
share -F nfs -o ro=chrome:copper:zinc,root=chrome /usr/man

it means that the /usr/man is "rw" to everyone (because "rw" isn't present) or the "ro" overwrites the default "rw" option? I'm a little confused on these details, could someone give me some lights?

Thanks.
# 2  
Old 10-01-2007
and nfs share of rw isn't necessarily dangerous, as it may be appropriate for clients to write to servers. the user/group/read/write/execute attributes are still respected, however you need to confirm that there is a one to one mapping for uids and gids between server and all clients.

the "root=" means that the root from server chrome will be allowed root access to this share. This would typically be used for diskless clients.
# 3  
Old 10-01-2007
Well, I think I was not explicit enough. With that share options, it means that /usr/man is rw to everyone due to the absent of rw in the options configuration? Or the ro option overwrites the default rw behaviour? It's the same having this:
Code:
share -F nfs -o ro=chrome:copper:zinc,root=chrome /usr/man

or this:

Code:
share -F nfs -o ro=chrome:copper:zinc,root=chrome,rw /usr/man

?

Nevermind the other options, they're there just as an example.
# 4  
Old 10-01-2007
A share is read/write unless the read only option is changes it.

Code:
                ro    Sharing will be read-only to all clients.

                ro=access_list
                      Sharing will be read-only  to  the  clients
                      listed  in  access_list;  overrides the  rw
                      suboption for the  clients  specified.  See
                      access_list below.

UNIX man pages : share_nfs (1M)
# 5  
Old 10-01-2007
But the order matters? For example:

Code:
share -F nfs -o rw=chrome,ro=chrome /usr/man

and

Code:
share -F nfs -o ro=chrome,rw=chrome /usr/man

I think in the 1st the ro overwrite the rw and in the 2nd vice-versa. Right?
# 6  
Old 10-01-2007
Quote:
Originally Posted by psimoes79
I think in the 1st the ro overwrite the rw and in the 2nd vice-versa. Right?
1. try it

2. it *may* be undefined behaviour,

however the doc says "ro" overrides "rw".
# 7  
Old 10-01-2007
The most restrictive permissions apply, in this case it will be ro.
Login or Register to Reply

|
Thread Tools Search this Thread
Search this Thread:
Advanced Search

More UNIX and Linux Forum Topics You Might Find Helpful
Unable to search NFS Share jgt IP Networking 5 12-21-2018 02:38 PM
Mount NFS Share On NFS Client via bash script. Brian.t Shell Programming and Scripting 4 03-13-2016 10:03 AM
NFS share and groups cjhilinski Red Hat 14 03-11-2015 10:24 AM
Permissions for NFS share Rossdba UNIX for Dummies Questions & Answers 0 08-27-2014 06:58 PM
NFS share mastansaheb Red Hat 1 04-10-2013 03:28 AM
Solaris 10 NFS Share Issue fallersaur Solaris 6 01-25-2013 03:42 PM
CIFS share re-export NFS prossits AIX 1 06-06-2012 03:22 PM
CIFS share re-export NFS prossits Red Hat 1 06-06-2012 02:12 PM
du and df do not match on NFS share masterpengu UNIX for Advanced & Expert Users 3 05-09-2011 06:01 PM
NFS Share Setup On AIX a_sim AIX 1 03-17-2011 05:23 AM
NFS- share drive question sam101 Solaris 3 01-24-2011 11:41 PM
NFs share AIX 6.1 and 5.3 - bug ? - unclefab AIX 1 06-07-2010 11:55 AM
Problem Mounting NFS share fcron IP Networking 2 03-20-2010 04:59 PM
NFS Share - chown problem SmartAntz Solaris 8 08-07-2009 03:34 AM
NFS share error rcmrulzz Red Hat 2 05-14-2008 08:05 AM