Re: [Dorset] SMB or NFS

2010-08-22 Thread Tim Allen
Hi Keith On 21/08/10 22:44, Keith Edmunds wrote: On Sat, 21 Aug 2010 22:24:15 +0100, t...@ls83.eclipse.co.uk said: The ability of a user on a client with root access being able to gain access to other users' files on an NFS server seemed like a fundamental problem when I was making this same

Re: [Dorset] SMB or NFS

2010-08-22 Thread Keith Edmunds
A correction to my last post: if you were using a network filesystem with remote authentication - for example, Samba/CIFS - it would be possible to prevent the local user with root access from accessing others' files on the server. -- Next meeting: Blandford Forum, Tuesday 2010-09-07 20:00

Re: [Dorset] SMB or NFS

2010-08-22 Thread Tim Allen
On 22/08/10 19:50, Keith Edmunds wrote: A correction to my last post: if you were using a network filesystem with remote authentication - for example, Samba/CIFS - it would be possible to prevent the local user with root access from accessing others' files on the server. That was my point. It

Re: [Dorset] SMB or NFS

2010-08-22 Thread John Cooper
On 22/08/10 22:10, Ralph Corderoy wrote: Hi Tim, That was my point. It seems anyone could plug a computer to which they have root access (eg a notebook brought in from home) into a network and with knowledge of UID's and GID's with NFS shares on a server they have full access to those. If

Re: [Dorset] SMB or NFS

2010-08-22 Thread Ralph Corderoy
Hi John, If the server was willing to export to their IP address, then I think you're right. Or if they could turn off a machine that was exported to, and then use its IP address... Any decent sysadmin would know the security risks and know how to prevent root access. Allowing an

Re: [Dorset] SMB or NFS

2010-08-21 Thread Keith Edmunds
On Sat, 21 Aug 2010 22:24:15 +0100, t...@ls83.eclipse.co.uk said: The ability of a user on a client with root access being able to gain access to other users' files on an NFS server seemed like a fundamental problem when I was making this same decision. With SMB you have got much better