NFS share options

Login or Register to Reply

Thread Tools Search this Thread
# 1  
Old 10-01-2007
NFS share options


I'm doing a Perl script to parse the dfstab file and find dangerous configurations (rw to everyone, root access, etc). My question is, if I have a share command like this:

share -F nfs -o ro=chrome:copper:zinc,root=chrome /usr/man

it means that the /usr/man is "rw" to everyone (because "rw" isn't present) or the "ro" overwrites the default "rw" option? I'm a little confused on these details, could someone give me some lights?

# 2  
Old 10-01-2007
and nfs share of rw isn't necessarily dangerous, as it may be appropriate for clients to write to servers. the user/group/read/write/execute attributes are still respected, however you need to confirm that there is a one to one mapping for uids and gids between server and all clients.

the "root=" means that the root from server chrome will be allowed root access to this share. This would typically be used for diskless clients.
# 3  
Old 10-01-2007
Well, I think I was not explicit enough. With that share options, it means that /usr/man is rw to everyone due to the absent of rw in the options configuration? Or the ro option overwrites the default rw behaviour? It's the same having this:
share -F nfs -o ro=chrome:copper:zinc,root=chrome /usr/man

or this:

share -F nfs -o ro=chrome:copper:zinc,root=chrome,rw /usr/man


Nevermind the other options, they're there just as an example.
# 4  
Old 10-01-2007
A share is read/write unless the read only option is changes it.

                ro    Sharing will be read-only to all clients.

                      Sharing will be read-only  to  the  clients
                      listed  in  access_list;  overrides the  rw
                      suboption for the  clients  specified.  See
                      access_list below.

UNIX man pages : share_nfs (1M)
# 5  
Old 10-01-2007
But the order matters? For example:

share -F nfs -o rw=chrome,ro=chrome /usr/man


share -F nfs -o ro=chrome,rw=chrome /usr/man

I think in the 1st the ro overwrite the rw and in the 2nd vice-versa. Right?
# 6  
Old 10-01-2007
Originally Posted by psimoes79
I think in the 1st the ro overwrite the rw and in the 2nd vice-versa. Right?
1. try it

2. it *may* be undefined behaviour,

however the doc says "ro" overrides "rw".
# 7  
Old 10-01-2007
The most restrictive permissions apply, in this case it will be ro.
Login or Register to Reply

Thread Tools Search this Thread
Search this Thread:
Advanced Search

More UNIX and Linux Forum Topics You Might Find Helpful
Unable to search NFS Share jgt IP Networking 5 12-21-2018 03:38 PM
Mount NFS Share On NFS Client via bash script. Brian.t Shell Programming and Scripting 4 03-13-2016 11:03 AM
NFS share and groups cjhilinski Red Hat 14 03-11-2015 11:24 AM
Permissions for NFS share Rossdba UNIX for Dummies Questions & Answers 0 08-27-2014 07:58 PM
NFS share mastansaheb Red Hat 1 04-10-2013 04:28 AM
Solaris 10 NFS Share Issue fallersaur Solaris 6 01-25-2013 04:42 PM
CIFS share re-export NFS prossits AIX 1 06-06-2012 04:22 PM
Ldom Vdisk on NFS Share fugitive Solaris 1 09-06-2011 03:33 AM
du and df do not match on NFS share masterpengu UNIX for Advanced & Expert Users 3 05-09-2011 07:01 PM
NFS Share Setup On AIX a_sim AIX 1 03-17-2011 06:23 AM
NFS- share drive question sam101 Solaris 3 01-25-2011 12:41 AM
NFs share AIX 6.1 and 5.3 - bug ? - unclefab AIX 1 06-07-2010 12:55 PM
Problem Mounting NFS share fcron IP Networking 2 03-20-2010 05:59 PM
NFS Share - chown problem SmartAntz Solaris 8 08-07-2009 04:34 AM
NFS share error rcmrulzz Red Hat 2 05-14-2008 09:05 AM