3 Replies Latest reply on Jul 30, 2012 12:47 PM by Brandon Gillis

Exports file allowing permissions from console?

Brandon Gillis Jul 30, 2012 11:23 AM

Share This:

I have a quick question about securing the RSC files. We noticed something this morning that I haven't seen before.

We are using 8.2.01 and this is our setup:

users and users.local are blank- nothing in them.

exports file has the following line:

* rw,user=root

I was expecting to get permission denied from the console when we attempted to browse the file server, instead I was granted all permissions on the box. We are logged in as USER with the BLAdmins role.

Is the exports file giving me permissions from the console, even with nothing in users and users.local?

1. Re: Exports file allowing permissions from console?

Lazar NameToUpdate Jul 30, 2012 11:29 AM (in response to Brandon Gillis)

exports:

First level if access. The line in the file means that the request from any server (*) will be mapped to local "root" account.

users:

Second level that overrides exports. If the file is empty, then whatever is in the exports holds.

users.local:

Third layer of access that overrides users. If this file is empty, then whatever is in users holds.
Like Show 0 Likes(0)

Actions
2. Re: Exports file allowing permissions from console?

Adam Bowen Jul 30, 2012 12:38 PM (in response to Brandon Gillis)

Correct. All inbound connections map to the root user, regardless of anything else. Exports is first in order of precedence.
Adam
304-916-7673
Sent from my BlackBerry.
Like Show 0 Likes(0)

Actions
3. Re: Exports file allowing permissions from console?

Brandon Gillis Jul 30, 2012 12:47 PM (in response to Brandon Gillis)

Thanks guys.
Like Show 0 Likes(0)

Actions

Go to original post

Communities

Communities

Exports file allowing permissions from console?

1. Re: Exports file allowing permissions from console?

2. Re: Exports file allowing permissions from console?

3. Re: Exports file allowing permissions from console?

Actions

More Like This