On Wed, Oct 09, 2002 at 01:56:08PM -0700, Todd Lyons wrote:
> That only works if your export from the server allows it:
> 
> [todd@fiji ~]$ cat /etc/exports 
> /usr 192.168.3.0/24(ro,root_squash,sync)
> 
> What he's asking for seems to be common in some places, but I've never
> implemented it myself, mostly due to the fact that so many things seem
> to want to write to /usr.  Those things that are being written to /usr
> seemingly should be written to /var.  Then again, there's nothing
> preventing us from making those directories be symlinks to someplace in
> /var on the local machine.  Maybe that's a plausible road to take.

Well root_squash is only useful for an NFS mounted share.  I wasn't
necessarily arguing against the changes.  In some respects it makes
sense to me.  But I don't think security is really a valid argument for
it.  But I do think it's a useful feature to administrators that want to
remotely mount /usr via NFS. 

-- 
Ben Reser <[EMAIL PROTECTED]>
http://ben.reser.org

Never take no as an answer from someone who isn't authorized to say yes.

Reply via email to