Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add a warning about exporting a filesystem using WebNFS and also exporting 

it the normal way, read/write to specific clients.
This commit is contained in:
fvdl 1997-10-19 15:29:20 +00:00
parent dc3654b410
commit 88d9f0f6a9
1 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
usr.sbin/mountd/exports.5
View File

@ -1,4 +1,4 @@
.\" $NetBSD: exports.5,v 1.12 1997/06/24 23:53:20 fvdl Exp $
.\" $NetBSD: exports.5,v 1.13 1997/10/19 15:29:20 fvdl Exp $
.\"
.\" Copyright (c) 1989, 1991, 1993
.\" The Regents of the University of California. All rights reserved.
@ -212,6 +212,16 @@ or
.Fl webnfs
flags.
.Pp
.Bf -symbolic
Warning: exporting a filesystem both using WebNFS and read/write in
the normal way to other hosts should be avoided in an environment
that is vulnerable to IP spoofing.
.Ef
WebNFS enables any client to get filehandles to the exported filesystem.
Using IP spoofing, a client could then pretend to be a host to which
the same filesystem was exported read/write, and use the handle to
gain access to that filesystem.
.Pp
The third component of a line specifies the host set to which the line applies.
The set may be specified in three ways.
The first way is to list the host name(s) separated by white space.