NFS exported directory (UNIX)

Module: Network Integrity

This check reports NFS exported directories with their export options. Use the file list to exclude directories from the check. Specify full path names in the file list.

The following table lists the error message for the check.

Table: Error message for NFS exported directory

Message String ID and Category	Platform and Message Numeric ID	Message Title and Description	Additional Information
String ID: STKU_FSEXPORT Category: Change Notification	UNIX (6361)	Title: File system exported Description:The following directories can be NFS mounted by remote systems. This is a security problem if there are no restrictions on which hosts can NFS mount the exported directories. You should export directories only if you explicitly specify each node that can NFS mount the directories. There is another security concern if the directories are exported with write access. Different sets of users can have access to the hosts that share an NFS directory. You should block write access to the exported directories. Finally, root access to exported file systems can be a security concern because privileged users on remote systems will have unrestricted access to the exported files.	Severity: green-0 Correctable: false Snapshot Updatable: false Template Updatable: false Information Field Format: [%s]

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: STKU_FSEXPORT

Category: Change Notification

UNIX (6361)

Title: File system exported

Description:The following directories can be NFS mounted by remote systems. This is a security problem if there are no restrictions on which hosts can NFS mount the exported directories. You should export directories only if you explicitly specify each node that can NFS mount the directories. There is another security concern if the directories are exported with write access. Different sets of users can have access to the hosts that share an NFS directory. You should block write access to the exported directories. Finally, root access to exported file systems can be a security concern because privileged users on remote systems will have unrestricted access to the exported files.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]