Domain names & /etc/exports
Mark Litwack
litwack at dccs.upenn.edu
Tue Oct 31 09:50:26 AEST 1989
> It's a mountd misfeature. What happens is this:
>
> - mounted receives a request from a.b.c.d (address)
> - it looks up the address to get the name
> - it matches the string it gets back against the names
> in the exports file
Not quite. The name that is matched is the name that the requesting
machine sends the server. It's strange to do the security check this
way because a requesting machine could lie about its name.
You have to start /etc/mountd with the -i option to make it verify
the IP address as described above (which is not the DEC default).
-mark
More information about the Comp.unix.ultrix
mailing list