[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

NFS security ...

    Date: Thu, 30 May 91 10:43 EDT
    From: buff@pravda.cc.gatech.edu (Richard Billington)

	Date: Thu, 30 May 1991 06:09-0400
	From: Christopher Stacy <CStacy@STONY-BROOK.SCRC.Symbolics.COM>

	You can also modify the NFS client that runs on your UNIX box, Macintosh,
	IBM or whatever, and thereby access any files on someone's server by simply
	claiming you are them.  It certainly doesn't matter what language it's
	written in, or what operating system is being used.

    Hmmm, I think you'd need root access to do this ...

No.  You would not be able to use NFS "pathnames" invisibly from Unix
programs, but you could write an NFS client program which worked like the
FTP command, except it gave out whatever UID/GID combination you supplied.