In message Pine.LNX.4.04.9904291507120.12868-100000@phaeton.cebaf.gov, Bry an Hess writes:
On Thu, 29 Apr 1999 tkaczma@gryf.net wrote:
On Wed, 28 Apr 1999, Kendall Libby wrote:
------- Start of forwarded message (RFC 934 encapsulation) ------- From: pashdown@XMISSION.COM (Pete Ashdown)
/vol/vol0 -root=adminhost
This is all fine and good, but it also exports to the WORLD with root privileges.
Are you sure it exports to all with root priviledges or does it just export to all read/write but as root only to adminhost?
It doesn't export root privs to all, but just exporting read/write to all machines is scary enough. If I am a malicious user, I can find the mount points easily enough, mount the filesystems, and create user accounts on my machine to match any uid on the filer. After that, who needs root privs except for files owner by uid 0?
--Bryan
This is not a "netapp meets bugtraq" issue. It's an "every NFS server configured by someone who doesn't know what he's doing meets bugtraq" issue.
Security is dependent on the competence of the administrator. Of course, here in the USA, no one is responsible for their own actions. So we should report Linux, SunOS, Solaris, HP-UX, AIX, Free BSD, NetBSD, etc... to bugtraq right away!!! And we'll all sue too!!!
Ooops, got way too sarcastic at the end there...
jason
I could not have put it better myself. -gdg
Jason D. Kelleher wrote:
In message Pine.LNX.4.04.9904291507120.12868-100000@phaeton.cebaf.gov, Bry an Hess writes:
On Thu, 29 Apr 1999 tkaczma@gryf.net wrote:
On Wed, 28 Apr 1999, Kendall Libby wrote:
------- Start of forwarded message (RFC 934 encapsulation) ------- From: pashdown@XMISSION.COM (Pete Ashdown)
/vol/vol0 -root=adminhost
This is all fine and good, but it also exports to the WORLD with root privileges.
Are you sure it exports to all with root priviledges or does it just export to all read/write but as root only to adminhost?
It doesn't export root privs to all, but just exporting read/write to all machines is scary enough. If I am a malicious user, I can find the mount points easily enough, mount the filesystems, and create user accounts on my machine to match any uid on the filer. After that, who needs root privs except for files owner by uid 0?
--Bryan
This is not a "netapp meets bugtraq" issue. It's an "every NFS server configured by someone who doesn't know what he's doing meets bugtraq" issue. Security is dependent on the competence of the administrator. Of course, here in the USA, no one is responsible for their own actions. So we should report Linux, SunOS, Solaris, HP-UX, AIX, Free BSD, NetBSD, etc... to bugtraq right away!!! And we'll all sue too!!! Ooops, got way too sarcastic at the end there... jason
-
G D Geen -
Jason D. Kelleher