Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is it safe to use an NFS share as the root of a web directory on another server? Under this config, multiple users would place their files on the NFS (not the web server).

How would you go about securing permissions to keep users from tampering with each others' data?

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

You need to fully secure all the NFS clients. NFS' security model relies on being able to trust the clients to manage UIDs and access control. There's a minimal amount of root-level security in root_squash, but any non-root user is fair game for an NFS client to abuse if they have a mind to do so.

Once you have got NFS clients you can trust, the problem is the same as any other "multi-user web hosting" scenario -- a set of permissions that provide appropriate access controls to read and write files as required by the operational requirements of the system.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.