From owner-freebsd-questions Wed Jul 3 13:47:38 1996 Return-Path: owner-questions Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id NAA24197 for questions-outgoing; Wed, 3 Jul 1996 13:47:38 -0700 (PDT) Received: from halloran-eldar.lcs.mit.edu (halloran-eldar.lcs.mit.edu [18.26.0.159]) by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id NAA24191 for ; Wed, 3 Jul 1996 13:47:35 -0700 (PDT) Received: by halloran-eldar.lcs.mit.edu; (5.65/1.1.8.2/19Aug95-0530PM) id AA09843; Wed, 3 Jul 1996 16:46:11 -0400 Date: Wed, 3 Jul 1996 16:46:11 -0400 From: Garrett Wollman Message-Id: <9607032046.AA09843@halloran-eldar.lcs.mit.edu> To: Terry Lambert Cc: compland@ism.com.br (Helio Coelho Jr. - CompuLand Informatica), questions@freebsd.org Subject: Re: Secure NFS In-Reply-To: <199607032029.NAA11155@phaeton.artisoft.com> References: <199607031840.PAA21776@unix1.ism.com.br> <199607032029.NAA11155@phaeton.artisoft.com> Sender: owner-questions@freebsd.org X-Loop: FreeBSD.org Precedence: bulk < said: >> Is it possible to set portmon variable, like in SunOS, in Freebsd to >> watch out the NFS mounts, forcing the request to come from a privileged port ? >> It's possible to set secure NFS in Freebsd ? > This is the default. You must use -n to disable it (man mountd). Of course, this really has nothing to do with security, it's just a stupid restriction on Sun's part to paper over the fact that standard NFS isn't secure. -GAWollman -- Garrett A. Wollman | Shashish is simple, it's discreet, it's brief. ... wollman@lcs.mit.edu | Shashish is the bonding of hearts in spite of distance. Opinions not those of| It is a bond more powerful than absence. We like people MIT, LCS, ANA, or NSA| who like Shashish. - Claude McKenzie + Florent Vollant