nfs option root_squash

maheshp86 · 07-16-2010, 04:34 AM

In /etc/exports one of the defaults option for host
is root_squash ,

ie any user having root privilage will mapped to user id 'nfsnobody'.

if it is so how root can mount nfs share from client??

pls clear my doubt.

acid_kewpie · 07-16-2010, 05:30 AM

It's not about mounting the share, it's about accessing the files inside it. As there is very little security inherent in NFSv2 / v3 it could easily be the case that someone with root access on their toy desktop development box can mount an NFS share on the core file server and edit things as root. This stops that.