have a machine that is an initiator to a few iscsi targets. The network between initiator and targets is physically secure, so I have always assumed that chap was not required
If I look at netstat, it has outgoing connections on high ports to port 3260 on the iscsi targets, and everything works nicely
Because these high ports are usable by any user, it would seem that any user, running root or not, can potentially set up a rogue iscsi initiator and do anything. I can telnet to 3260 on any of the iscsi targets and get a connection, so it would seem that I can potentially gain block access to any disk without being root on the initiator machine.
Am I correct?