<HTML
><HEAD
><TITLE
>$B%;%-%e%j%F%#$H(B NFS</TITLE
><META
NAME="GENERATOR"
CONTENT="Modular DocBook HTML Stylesheet Version 1.54"><LINK
REL="HOME"
TITLE="Linux NFS-HOWTO"
HREF="index.html"><LINK
REL="PREVIOUS"
TITLE="NFS $B$N@-G=$r:GE,2=$9$k(B"
HREF="performance.html"><LINK
REL="NEXT"
TITLE="$B%H%i%V%k%7%e!<%H(B"
HREF="troubleshooting.html"></HEAD
><BODY
CLASS="SECT1"
BGCOLOR="#FFFFFF"
TEXT="#000000"
><DIV
CLASS="NAVHEADER"
><TABLE
WIDTH="100%"
BORDER="0"
CELLPADDING="0"
CELLSPACING="0"
><TR
><TH
COLSPAN="3"
ALIGN="center"
>Linux NFS-HOWTO</TH
></TR
><TR
><TD
WIDTH="10%"
ALIGN="left"
VALIGN="bottom"
><A
HREF="performance.html"
>Prev</A
></TD
><TD
WIDTH="80%"
ALIGN="center"
VALIGN="bottom"
></TD
><TD
WIDTH="10%"
ALIGN="right"
VALIGN="bottom"
><A
HREF="troubleshooting.html"
>Next</A
></TD
></TR
></TABLE
><HR
ALIGN="LEFT"
WIDTH="100%"></DIV
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
NAME="SECURITY"
>6. $B%;%-%e%j%F%#$H(B NFS</A
></H1
><P
> $B$3$3$G$$$/$D$+=R$Y$k%;%-%e%j%F%#>e$NN10UE@$O!"(B
$B$"$J$?$N%5%$%H$r40A4$K0BA4$K$7$F$/$l$k$o$1$G$O$"$j$^$;$s!#(B
$B$J$K$b$N$b!"%5%$%H$r(B<EM
>$B40A4$K(B</EM
>$B0BA4$K$9$k$3$H$O$G$-$^$;$s!#(B
$B$3$N@a$NFbMF$O!"(B
NFS $BMm$_$N%;%-%e%j%F%#LdBj$K4X$9$kCN<1$rM?$($F$/$l$^$9$,!"(B
$BLVMeE*$J%,%$%I$G$O$"$j$^$;$s$7!"(B
$B$3$NFbMF$b>o$KJQ2=$7B3$1$F$$$^$9!#(B
$B$b$7%;%-%e%j%F%#4XO"$N5;$d%R%s%H$r$*;}$A$G$7$?$i!"(B
HOWTO $B$N4IM}<T$KAw$C$F$/$@$5$$!#(B
</P
><P
> $B$b$7$"$J$?$N%M%C%H%o!<%/$,!"30It$H$$$C$5$$$NDL?.$r9T$o$:(B
($B%b%G%`$b$@$a(B)$B!"$+$DFbIt$N%^%7%s$9$Y$F$H%f!<%6$9$Y$F$r?.Mj$G$-$k$J$i!"(B
$B$3$N@a$NFbMF$O$"$J$?$NLr$K$ON)$A$^$;$s!#(B
$B$7$+$7$3$N$h$&$J>u67$K$"$k%M%C%H%o!<%/$O$I$A$i$+$H$$$&$H>/?t$G$7$g$&$+$i!"(B
NFS $B$r@_Dj$9$k?M$K$O!"$3$N@a$rE0DlE*$K=OFI$9$k$3$H$r$*$9$9$a$7$^$9!#(B
</P
><P
> NFS $B$K$*$1$k%"%/%;%9$K$O(B 2 $B$D$N<oN`(B ($BCJ3,(B) $B$,$"$j$^$9!#(B
$B:G=i$NCJ3,$O%^%&%s%H%"%/%;%9$G$9!#(B
$B%^%&%s%H%"%/%;%9$O!"%5!<%P$K%"%?%C%A$7$h$&$H$7$F$$$k(B
$B%/%i%$%"%s%H%^%7%s$K$h$C$F9T$o$l$^$9!#(B
$B$3$NCJ3,$G$N%;%-%e%j%F%#$O(B
<TT
CLASS="FILENAME"
>/etc/exports</TT
> $B%U%!%$%k$,:81&$7$^$9!#(B
$B$3$N%U%!%$%k$O!"6&M-%]%$%s%H$X$N%"%/%;%9$r5v2D$9$k%^%7%s$N(B
$BL>A0$^$?$O(B ip $B%"%I%l%9$r%j%9%H$7$?$b$N$G$9!#(B
$B%/%i%$%"%s%H$N(B ip $B%"%I%l%9$,$3$N%"%/%;%9%j%9%H$N%(%s%H%j$N$I$l$+$K(B
$B%^%C%A$9$l$P!"$=$N%^%7%s$O%^%&%s%H$r5v$5$l$^$9!#(B
$B$3$l$O$b$N$9$4$/0BA4!"$H$$$&$o$1$G$O$"$j$^$;$s!#(B
$B%"%I%l%9$r:>>N$5$l$?$j>h$C<h$i$l$?$j$9$k$H!"(B
$B%^%&%s%H%]%$%s%H$X$N%"%/%;%9$r5v$7$F$7$^$$$^$9!#(B
$B$3$N%?%$%W$N!VG'>Z!W$r<B@$3&$KNc$($F$_$^$7$g$&$+(B:
$BC/$+$,<+8J>R2p$r$7$F$-$?$H$7$F!"(B
$B$=$N?M$K!V$3$s$K$A$O!";d$NL>A0$O(B ... $B$G$9!W(B
$B$H$$$&L>;%$,$D$$$F$$$k$3$H$rM}M3$K!"(B
$B$=$N<+8J>R2p$NFbMF$r?.$8$k$h$&$J$b$N$G$9!#(B
</P
><P
> $BFsHVL\$NCJ3,$O%U%!%$%k%"%/%;%9$G$9!#(B
$B$3$l$ODL>o$N%U%!%$%k%7%9%F%`$K$b$"$k%"%/%;%9@)8f$N5!G=$G$"$j!"(B
NFS $BFH<+$N$b$N$G$O$"$j$^$;$s!#(B
$B%I%i%$%V$,%^%&%s%H$5$l$k$H!"(B
$B$=$3$N%U%!%$%k$N%f!<%6%Q!<%_%C%7%g%s!&%0%k!<%W%Q!<%_%C%7%g%s$,(B
$B%"%/%;%9@)8f$r7h$a$k$3$H$K$J$j$^$9!#(B
</P
><P
> $B:F$SNc$r(B: bob $B$O%5!<%P$G%f!<%6(B ID 9999 $B$K%^%C%W$5$l$F$$$k$H$7$^$7$g$&!#(B
$B%\%V$O%5!<%P$G%f!<%6$N$_$,%"%/%;%9$G$-$k%U%!%$%k(B (8 $B?J?t$G(B 0600)
$B$r:n$j$^$9!#(B
$B$=$N%U%!%$%k$,J]B8$5$l$?%I%i%$%V$X$N%"%/%;%9$r!"(B
$B$"$k%/%i%$%"%s%H$,5v2D$5$l$^$7$?!#(B
$B$=$N%/%i%$%"%s%H$G$O!"%f!<%6(B ID 9999 $B$K$O(B mary $B$,%^%C%W$5$l$F$$$^$9!#(B
$B$3$N>l9g!"(Bbob $B$,<+J,$K$7$+%"%/%;%9$G$-$J$$$h$&$K$7$?%U%!%$%k$KBP$7$F!"(B
$B$=$N%/%i%$%"%s%H$G$N%f!<%6(B mary $B$,%"%/%;%9$G$-$F$7$^$$$^$9!#(B
$B$5$i$K0-$$$3$H$K!"$=$N%/%i%$%"%s%H$GC/$+$,(B root $B$K$J$C$F$7$^$&$H!"(B
$B$=$NC/$+$O(B <B
CLASS="COMMAND"
>su - [username]</B
> $B$K$h$C$F(B
$B$I$s$J%f!<%6$K$b$J$l$F$7$^$&$N$G$9!#(B
NFS $B$O8-$$$H$O8@$($^$;$s!#(B
</P
><P
> $B$3$l$O@dK>E*$J>u67$H$$$&$o$1$G$O$"$j$^$;$s!#(B
$B$3$N%/%i%$%"%s%H$K$h$k4m81@-$O!"(B
$B%5!<%P$K$$$/$D$+$N<jCJ$r;\$;$P7Z8:$9$k$3$H$,$G$-$^$9!#(B
$B$=$l$i$b4JC1$K>R2p$7$^$9!#(B
</P
><P
> $B%;%-%e%j%F%#LdBj$O<+J,$K$O4X78$J$$!"$H$$$&9M$($O$*$=$i$/4V0c$$$G$9!#(B
<A
HREF="security.html#PORTMAPPER-SECURITY"
>Section 6.1</A
>
$B$G$O%]!<%H%^%C%Q$r0BA4$K$9$kJ}K!$r=R$Y!"(B
<A
HREF="security.html#SERVER.SECURITY"
>Section 6.2</A
> $B$G$O%5!<%P$r!"(B
<A
HREF="security.html#CLIENT.SECURITY"
>Section 6.3</A
> $B$G$O%/%i%$%"%s%H$r0BA4$K$9$kJ}K!$r(B
$B$=$l$>$l@bL@$7$^$9!#(B
$B:G8e$K(B <A
HREF="security.html#FIREWALLS"
>Section 6.4</A
> $B$G!"(B
NFS $B%5!<%P8~$1$N@5$7$$%U%!%$%"%&%)!<%k@_Dj$K$D$$$F(B
$B4JC1$K5DO@$7$?$$$H;W$$$^$9!#(B
</P
><P
> $B:G8e$K$b$&0l$D!"(B
nfs $B$N%G!<%b%s$H%/%i%$%"%s%H%W%m%0%i%`$N$9$Y$F$r:G?7$K$7$F$*$/$3$H$O(B
$BHs>o$K=EMW$G$9!#$4$/:G6a$K%"%J%&%s%9$5$l$?LdBj$@$+$i(B
$B<+J,$K$O4X78$J$$$@$m$&!"$H$$$&9M$($F$$$k?M$O!"(B
$B$9$G$K$=$N;~E@$G?/F~$5$l$F$$$k$+$b$7$l$^$;$s$h!#(B
</P
><P
> $B:G?7$N%;%-%e%j%F%#4+9p$rF($5$J$$$h$&$K$9$k$K$O!"(B
bugtraq $B%a!<%j%s%0%j%9%H$r9XFI$9$k$N$,NI$$$G$7$g$&!#(B
$B9XFI$NJ}K!$J$I!"(Bbugtraq $B$K4X$9$k3F<o$N>pJs$O(B
<A
HREF="http://www.securityfocus.com/forums/bugtraq/faq.html"
TARGET="_top"
>http://www.securityfocus.com/forums/bugtraq/faq.html</A
>
$B$K$"$j$^$9!#(B
</P
><P
> $B$^$?(B
<A
HREF="http://www.securityfocus.com"
TARGET="_top"
>securityfocus.com</A
>
$B$N8!:w%(%s%8%s$G(B <EM
>NFS</EM
> $B$r8!:w$9$l$P!"(B
NFS $B$K4XO"$9$k%;%-%e%j%F%#Js9p$N$9$Y$F$r8+$k$3$H$b$G$-$^$9!#(B
</P
><P
> CERT $B$N4+9p$bDj4|E*$K%A%'%C%/$7$^$7$g$&!#(B
<A
HREF="http://www.cert.org"
TARGET="_top"
>www.cert.org</A
>
$B$K$"$k(B CERT $B$N%&%'%V%Z!<%8$r$4Mw$K$J$C$F$/$@$5$$!#(B
</P
><DIV
CLASS="SECT2"
><H2
CLASS="SECT2"
><A
NAME="PORTMAPPER-SECURITY"
>6.1. $B%]!<%H%^%C%Q(B</A
></H2
><P
> $B%]!<%H%^%C%Q$O$I$N%5!<%S%9$,$I$N%]!<%H$GF0:n$7$F$$$k$+$N0lMw$r(B
$BJ]4I$7$^$9!#@\B3$7$F$/$k%^%7%s$O!"(B
$B$"$k%5!<%S%9$K%"%/%;%9$9$k$K$O$I$N%]!<%H$K@\B3$9$l$PNI$$$+$r!"(B
$B$3$N%j%9%H$rMQ$$$FCN$k$N$G$9!#(B
</P
><P
>
$B%]!<%H%^%C%Q$O!"?tG/A0$h$j$O$@$$$V$^$7$K$J$j$^$7$?$,!"(B
$B$7$+$78=:_$G$bB?$/$N%7%9%F%`4IM}<T$NF,DK$N<o$G$9!#(B
$B%]!<%H%^%C%Q$b!"(BNFS $B$d(B NIS $B$HF1$8$/!"(B
$B?.Mj$G$-$k%m!<%+%k%(%j%"%M%C%H%o!<%/$N30$+$i$O(B
$B%"%/%;%9$r5v$9$Y$-$G$O$"$j$^$;$s!#(B
$B$b$730It@$3&$K;/$5$J$1$l$P$J$i$J$$4D6-$G$O!"(B
$B>o$KCm0U$7$F!"$3$l$i$N%7%9%F%`$rF~G0$K4F;k$7$J$1$l$P$J$j$^$;$s!#(B
</P
><P
> Linux $B%G%#%9%H%j%S%e!<%7%g%s$O!"$9$Y$FF1$8$K$O$G$-$F$$$^$;$s!#(B
$B:G?7$K8+$($k%G%#%9%H%j%S%e!<%7%g%s$G$b!"(B
$B0BA4$G$J$$%]!<%H%^%C%Q$r:NMQ$7$F$$$k$3$H$,$"$j$^$9!#(B
$B8=:_;H$C$F$$$k%]!<%H%^%C%Q$,0BA4$J$b$N$+$I$&$+$rD4$Y$k$K$O!"(B
<EM
>strings(1)</EM
> $B$rMQ$$$F!"%]!<%H%^%C%Q$,(B
<TT
CLASS="FILENAME"
>/etc/hosts.deny</TT
> $B$d(B
<TT
CLASS="FILENAME"
>/etc/hosts.allow</TT
>
$B$H$$$C$?%U%!%$%k$r8+$F$$$k$+D4$Y$k$3$H$G$9!#(B
$B%]!<%H%^%C%Q$,(B <TT
CLASS="FILENAME"
>/sbin/portmap</TT
>
$B$K$"$k$N$G$7$?$i!"<!$N%3%^%s%I$G%A%'%C%/$G$-$^$9(B:
<TABLE
BORDER="0"
BGCOLOR="#E0E0E0"
WIDTH="100%"
><TR
><TD
><FONT
COLOR="#000000"
><PRE
CLASS="PROGRAMLISTING"
> strings /sbin/portmap | grep hosts.
</PRE
></FONT
></TD
></TR
></TABLE
>
</P
><P
> $B0BA4$J%^%7%s$G$O!"<!$N$h$&$JFbMF$,=PNO$5$l$k$O$:$G$9!#(B
<TABLE
BORDER="1"
BGCOLOR="#E0E0E0"
WIDTH="100%"
><TR
><TD
><FONT
COLOR="#000000"
><PRE
CLASS="SCREEN"
> /etc/hosts.allow
/etc/hosts.deny
@(#) hosts_ctl.c 1.4 94/12/28 17:42:27
@(#) hosts_access.c 1.21 97/02/12 02:13:22
</PRE
></FONT
></TD
></TR
></TABLE
>
</P
><P
> $B$^$:(B <TT
CLASS="FILENAME"
>/etc/hosts.deny</TT
> $B$rJT=8$7$^$9!#(B
$B<!$N$h$&$J9T$r4^$`$h$&$K$7$^$9!#(B
</P
><P
> <TABLE
BORDER="1"
BGCOLOR="#E0E0E0"
WIDTH="100%"
><TR
><TD
><FONT
COLOR="#000000"
><PRE
CLASS="SCREEN"
> portmap: ALL
</PRE
></FONT
></TD
></TR
></TABLE
>
</P
><P
> $B$3$&$9$k$H$"$i$f$k%"%/%;%9$r5qH]$7$^$9!#(B
$B$3$N%/%m!<%:$7$?>uBV$G(B
<TABLE
BORDER="1"
BGCOLOR="#E0E0E0"
WIDTH="100%"
><TR
><TD
><FONT
COLOR="#000000"
><PRE
CLASS="SCREEN"
> rpcinfo -p
</PRE
></FONT
></TD
></TR
></TABLE
>
$B$r<B9T$7!"%]!<%H%^%C%Q$,<B:]$K$3$N%U%!%$%k$rFI$_!"(B
$B$=$N;XDj$K=>$C$F$$$k$+$rD4$Y$F$_$F$/$@$5$$!#(B
rpcinfo $B$O2?$N=PNO$b=P$5$J$$$O$:$G$9(B
($B$"$k$$$O%(%i!<%a%C%;!<%8$r=P$9$+$b$7$l$^$;$s(B)$B!#(B
<TT
CLASS="FILENAME"
>/etc/hosts.allow</TT
> $B$*$h$S(B
<TT
CLASS="FILENAME"
>/etc/hosts.deny</TT
>
$B$N3F%U%!%$%k$O!"J]B8$9$l$P$9$0$KH?1G$5$l$^$9!#(B
$B$$$:$l$N%G!<%b%s$b:F5/F0$9$kI,MW$O$"$j$^$;$s!#(B
</P
><P
> $B%]!<%H%^%C%Q$r$9$Y$FJD$8$F$7$^$&$N$O>/!96KC<$K2a$.$k$N$G!"(B
<TT
CLASS="FILENAME"
>/etc/hosts.allow</TT
> $B$rJT=8$7$F(B
$B:F$S%*!<%W%s$7$F$$$-$^$7$g$&!#(B
$B$7$+$7$^$:!"$3$N%U%!%$%k$K2?$r=q$/$+7h$a$J$1$l$P$J$j$^$;$s!#(B
$B4pK\E*$K$O$3$N%]!<%H%^%C%Q$K%"%/%;%9$7$J$1$l$P$J$i$J$$(B
$B$9$Y$F$N%^%7%s$r%j%9%H$7$^$9!#(B
$BDL>o$N(B Linux $B%7%9%F%`$r2TF/$5$;$k$K$"$?$C$F$O!"(B
$B$J$s$i$+$NM}M3$G2?$+$N%"%/%;%9$,I,MW$K$J$k%^%7%s$OHs>o$K>/$J$$$O$:$G$9!#(B
$B%]!<%H%^%C%Q$,4IM}$7$F$$$k$N$O(B <B
CLASS="COMMAND"
>nfsd</B
>,
<B
CLASS="COMMAND"
>mountd</B
>,
<B
CLASS="COMMAND"
>ypbind</B
>/<B
CLASS="COMMAND"
>ypserv</B
>,
<B
CLASS="COMMAND"
>pcnfsd</B
> $B$J$I!"$=$7$F(B
<B
CLASS="COMMAND"
>ruptime</B
> $B$d(B <B
CLASS="COMMAND"
>rusers</B
>
$B$N$h$&$J(B "r" $B7O%3%^%s%I72$G$9!#(B
$B$3$N$&$A$J$s$i$+$N=EMW@-$,$"$k$N$O!"(B
<B
CLASS="COMMAND"
>nfsd</B
>, <B
CLASS="COMMAND"
>mountd</B
>,
<B
CLASS="COMMAND"
>ypbind</B
>/<B
CLASS="COMMAND"
>ypserv</B
> $B$*$h$S$*$=$i$/(B
<B
CLASS="COMMAND"
>pcnfsd</B
> $B$@$1$G$9!#(B
$B%5!<%P%^%7%s$K%"%/%;%9$,I,MW$J%^%7%s$K$O!"(B
$B$=$l$r5v2D$7$F$"$2$kI,MW$,$"$j$^$9!#(B
$B$$$^%5!<%P$N%"%I%l%9$,(B <EM
>192.168.0.254</EM
> $B$G!"(B
$B%5%V%M%C%H(B <EM
>192.168.0.0</EM
> $B$K$D$J$,$C$F$$$k$H$7$^$9!#(B
$B$=$7$F$=$N%5%V%M%C%H$N$9$Y$F$N%^%7%s$O%5!<%P$K%"%/%;%9$9$kI,MW$,(B
$B$"$k$H$7$^$9(B ($B$3$l$i$NMQ8l$O(B
<A
HREF="http://www.linuxdoc.org/HOWTO/Networking-Overview-HOWTO.html"
TARGET="_top"
>Networking-Overview-HOWTO</A
>
$B$G@bL@$5$l$F$$$^$9!#I,MW$N$"$kJ}$O$3$A$i$r8+$F$/$@$5$$(B:
<A
HREF="http://www.linux.or.jp/JF/JFdocs/Networking-Overview-HOWTO.html"
TARGET="_top"
>$BF|K\8lLu(B</A
>$B$b(B JF $B$K$"$j$^$9(B)$B!#(B
$B$3$N>l9g$O(B
<TABLE
BORDER="1"
BGCOLOR="#E0E0E0"
WIDTH="100%"
><TR
><TD
><FONT
COLOR="#000000"
><PRE
CLASS="SCREEN"
> portmap: 192.168.0.0/255.255.255.0
</PRE
></FONT
></TD
></TR
></TABLE
>
$B$N$h$&$J9T$r(B <TT
CLASS="FILENAME"
>/etc/hosts.allow</TT
> $B$K=q$-$^$9!#(B
$B$3$l$O(B <B
CLASS="COMMAND"
>route</B
> $B$KM?$($k%M%C%H%o!<%/%"%I%l%9!"(B
$B$*$h$S(B <B
CLASS="COMMAND"
>ifconfig</B
> $B$KM?$($k%5%V%M%C%H%^%9%/$HF1$8$G$9!#(B
$B$3$N%^%7%s$G$N%G%P%$%9(B eth0 $B$X$N(B
<B
CLASS="COMMAND"
>ifconfig</B
> $B$O<!$N$h$&$K$J$C$F$$$k$O$:$G$9!#(B
</P
><P
> <TABLE
BORDER="1"
BGCOLOR="#E0E0E0"
WIDTH="100%"
><TR
><TD
><FONT
COLOR="#000000"
><PRE
CLASS="SCREEN"
> ...
eth0 Link encap:Ethernet HWaddr 00:60:8C:96:D5:56
inet addr:192.168.0.254 Bcast:192.168.0.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:360315 errors:0 dropped:0 overruns:0
TX packets:179274 errors:0 dropped:0 overruns:0
Interrupt:10 Base address:0x320
...
</PRE
></FONT
></TD
></TR
></TABLE
>
$B$^$?(B <B
CLASS="COMMAND"
>netstat -rn</B
> $B$O<!$N$h$&$K$J$k$O$:$G$9!#(B
<TABLE
BORDER="1"
BGCOLOR="#E0E0E0"
WIDTH="100%"
><TR
><TD
><FONT
COLOR="#000000"
><PRE
CLASS="SCREEN"
> Kernel routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
...
192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 174412 eth0
...
</PRE
></FONT
></TD
></TR
></TABLE
>
($B%M%C%H%o!<%/%"%I%l%9$O:G=i$NNs$K$"$j$^$9!#(B)
</P
><P
> <TT
CLASS="FILENAME"
>/etc/hosts.deny</TT
> $B$*$h$S(B
<TT
CLASS="FILENAME"
>/etc/hosts.allow</TT
> $B3F%U%!%$%k$K$D$$$F$O!"(B
$B$=$l$>$lF1L>$N(B man $B%Z!<%8$G@bL@$5$l$F$$$^$9!#(B
[$BLuCm(B: hosts_access(5) $B$N>l9g$,B?$$$H;W$$$^$9$,!#(B]
</P
><P
> <EM
> $B=EMW(B: $B$3$l$i$N%U%!%$%k$N(B portmap $B$N9T$K!"(B
IP $BHV9f0J30$N$b$N$r=q$$$F$O$$$1$^$;$s!#(B
$B%[%9%HL>$NL>A00z$-$O4V@\E*$K%]!<%H%^%C%Q$r8F$S=P$9$3$H$,$"$j!"(B
$B$9$k$H$^$?%[%9%HL>$NL>A00z$-@8$8$F%]!<%H%^%C%Q$,8F$S=P$5$l!"(B
$B$9$k$H$^$?(B...
</EM
>
</P
><P
> $B%P!<%8%g%s(B 0.2.0 $B0J9_$G$O!"(Bnfs-utils $B%Q%C%1!<%8$b(B
<TT
CLASS="FILENAME"
>hosts.allow</TT
> $B$H(B <TT
CLASS="FILENAME"
>hosts.deny</TT
>
$B$N3F%U%!%$%k$rMxMQ$7$^$9!#=>$C$F$3$l$i$N%U%!%$%k$K$O!"(B
<B
CLASS="COMMAND"
>lockd</B
>, <B
CLASS="COMMAND"
>statd</B
>,
<B
CLASS="COMMAND"
>mountd</B
>, <B
CLASS="COMMAND"
>rquotad</B
>
$B$N3F%(%s%H%j$b=q$$$F$*$-$^$7$g$&!#(B
</P
><P
> $B0J>e$N:n6H$K$h$C$F!"%5!<%P$O$h$j$7$C$+$j$9$k$O$:$G$9!#(B
$B;D$j$NLdBj$O(B ($B$4L@;!(B!) $B?.Mj$7$?%^%7%s$G(B root $B$,GK$i$l(B
($B$"$k$$$O$=$N%^%7%s$,(B MS-DOS $B$G%V!<%H$5$l(B)$B!"(B
$B$=$NFC8"$G$b$C$F!"(B
$B0BA4$J%]!<%H$+$iG$0U$N%f!<%6$K$J$j$9$^$7$?%j%/%(%9%H$r(B
$BAw$C$F$/$k$h$&$J>l9g$G$9!#(B
</P
></DIV
><DIV
CLASS="SECT2"
><H2
CLASS="SECT2"
><A
NAME="SERVER.SECURITY"
>6.2. $B%5!<%P$N%;%-%e%j%F%#(B: nfsd $B$H(B mountd</A
></H2
><P
> $B%5!<%P$G$O%/%i%$%"%s%H$N(B root $B%"%+%&%s%H$r?.Mj$7$J$$$h$&$J@_Dj$,$G$-$^$9!#(B
$B$3$l$K$O(B <TT
CLASS="FILENAME"
>/etc/exports</TT
> $B$N;XDj$K(B
<TT
CLASS="USERINPUT"
><B
>root_squash</B
></TT
> $B%*%W%7%g%s$rMQ$$$^$9(B:
<TABLE
BORDER="0"
BGCOLOR="#E0E0E0"
WIDTH="100%"
><TR
><TD
><FONT
COLOR="#000000"
><PRE
CLASS="PROGRAMLISTING"
> /home slave1(rw,root_squash)
</PRE
></FONT
></TD
></TR
></TABLE
>
</P
><P
> $B<B$O$3$l$O%G%U%)%k%H$G$9!#(B
$BL58z$K$9$Y$-$d$`$K$d$^$l$L;v>p$,$J$$8B$j!"(B
$B$3$l$O>o$KM-8z$K$7$F$*$/$Y$-$G$9!#(B
$BL58z$K$9$k$K$O(B <TT
CLASS="USERINPUT"
><B
>no_root_squash</B
></TT
>
$B%*%W%7%g%s$r;H$$$^$9!#(B
</P
><P
> root_squash $B$N>uBV$G$O!"%/%i%$%"%s%H$G(B <EM
>UID</EM
> 0
(root $B$N%f!<%6HV9f(B) $B$N%f!<%6$,%U%!%$%k$K%"%/%;%9(B
(read, write, delete) $B$7$h$&$H$9$k$H!"(B
$B%5!<%P$O(B <EM
>UID</EM
> $B$r%5!<%P$K$*$1$k(B 'nobody'
$B%"%+%&%s%H$N$b$N$HCV$-49$($^$9!#(B
$B$D$^$j%5!<%P$N(B root $B$@$1$K%"%/%;%9$dJQ99$,5v$5$l$F$$$k%U%!%$%k$KBP$7$F!"(B
$B%/%i%$%"%s%H$N(B root $B$,%"%/%;%9$dJQ99$r9T$&$3$H$,$G$-$J$/$J$k$N$G$9!#(B
$B$3$l$ONI$$@_Dj$G$9$N$G!"(B
export $B$9$kA4$F$N%U%!%$%k%7%9%F%`$K(B root_squash $B$rMQ$$$k$Y$-$G$9!#(B
$B!V$G$b%/%i%$%"%s%H$N(B root $B%f!<%6$,(B <B
CLASS="COMMAND"
>su</B
> $B$r;H$($P!"(B
$BB>$N%f!<%6$K$J$C$F$=$N%f!<%6$N%U%!%$%k$rJQ99$G$-$A$c$&$8$c$J$$$G$9$+!*!W(B
$B$H$"$J$?$O$*$C$7$c$k$+$b$7$l$^$;$s!#Ez$($O!"$^$5$K$=$NDL$j!"(B
$B$=$l$,(B Unix $B$d(B NFS $B$NN.57$J$N$G$9!#(B
$B$3$l$K$O$R$H$D=EMW$JB&LL$,$"$j$^$9!#(B
$B=EMW$J%P%$%J%j$d%U%!%$%k$O!"$9$Y$F(B root $B$N=jM-$K$9$Y$-$G!"(B
bin $B$J$I$N(B root $B0J30$N%"%+%&%s%H$K$9$Y$-$G$O$"$j$^$;$s!#(B
$B$J$<$J$i%/%i%$%"%s%H$N(B root $B%f!<%6$,%"%/%;%9$G$-$J$$$N$O!"(B
$B%5!<%P$N(B root $B%"%+%&%s%H$N%U%!%$%k$@$1$@$+$i$G$9!#(B
<EM
>exports(5)</EM
> $B$N(B man $B%Z!<%8$K$O!"(B
$BB>$K$b$$$/$D$+(B squash ($BGSB>(B) $B%*%W%7%g%s$,5-=R$5$l$F$$$^$9!#(B
$B$3$l$i$rMQ$$$l$P!"9%$-$J(B ($B$"$k$$$O7y$$$J(B)
$B%/%i%$%"%s%H$r?.Mj$7$J$$$h$&$K@_Dj$G$-$^$9!#(B
</P
><P
> TCP $B$N%]!<%H(B 1$B!A(B1024 $B$O(B root $B$,MxMQ$9$k$?$a$KM=Ls$5$l$F$*$j(B
($B=>$C$F(B "secure ports" $B$H8F$P$l$k$3$H$,$"$j$^$9(B)$B!"(B
root $B$G$J$$%f!<%6$O$3$l$i$N%]!<%H$K%P%$%s%I$G$-$^$;$s!#(B
<TT
CLASS="FILENAME"
>/etc/exports</TT
> $B$N%(%s%H%j$K(B secure $B%*%W%7%g%s$r(B
$BDI2C$9$k$H!"(B1024 $B0J2<$N%]!<%H$GF0:n$9$k$h$&$K$J$j$^$9!#(B
$B$9$k$H0-0U$r;}$C$?Hs(B root $B%f!<%6$,!"(B
$B56Au(B NFS $BDL?.$r(B 1024 $B0J>e$N%]!<%H$r;H$C$F3+$/$3$H$,KI$2$^$9!#(B
$B$3$N%*%W%7%g%s$O%G%U%)%k%H$GM-8z$K$J$C$F$$$^$9!#(B
</P
></DIV
><DIV
CLASS="SECT2"
><H2
CLASS="SECT2"
><A
NAME="CLIENT.SECURITY"
>6.3. $B%/%i%$%"%s%H$N%;%-%e%j%F%#(B</A
></H2
><DIV
CLASS="SECT3"
><H3
CLASS="SECT3"
><A
NAME="NOSUID"
>6.3.1. nosuid $B%^%&%s%H%*%W%7%g%s(B</A
></H3
><P
> $B%/%i%$%"%s%HB&$G$O!"%5!<%P$r?.Mj$7$9$.$J$$$h$&$K@_Dj$9$k$3$H$,2DG=$G!"(B
$B$3$l$O%^%&%s%H;~$N%*%W%7%g%s$G;XDj$7$^$9!#(B
$BNc$($P(B NFS $B%U%!%$%k%7%9%F%`$K$"$k(B suid $B%W%m%0%i%`$r(B
$BF0:n$5$;$J$$$h$&$K$9$k$K$O(B nosuid $B%*%W%7%g%s$r;H$$$^$9!#(B
unix $B%W%m%0%i%`$NCf$K$O(B ($BNc$($P(B passwd)$B!"(B "suid"
$B%W%m%0%i%`$H8F$P$l$k$b$N$,$"$j$^$9!#(B
$B$3$l$O%U%!%$%k$r<B9T$9$k%f!<%6(B id $B$r!"(B
$B$=$N%U%!%$%k$N=jM-<T$HF1$8$K$9$k$b$N$G$9!#(B
$B%U%!%$%k$,(B root $B$N=jM-$G!"$+$D(B suid $B$5$l$F$$$k$H!"(B
$B$=$N%W%m%0%i%`$O(B root $B$H$7$FF0:n$7!"(B
$B$h$C$F(B root $B$K$7$+5v$5$l$F$$$J$$A`:n(B ($B%Q%9%o!<%I%U%!%$%k$N=q$-9~$_$J$I(B)
$B$,$9$Y$F9T$($F$7$^$$$^$9!#(B
nosuid $B%*%W%7%g%s$rMQ$$$k$N$O$h$$9M$($G$9$+$i!"(B
NFS $B%^%&%s%H$7$?%G%#%9%/$9$Y$F$KBP$7!"MxMQ$r8!F$$7$F$/$@$5$$!#(B
$B$3$&$9$k$H%5!<%P$N(B root $B%f!<%6$,7o$N%U%!%$%k%7%9%F%`$K(B
suid-root $B%W%m%0%i%`$r:n$j!"%/%i%$%"%s%H$K0lHL%f!<%6$H$7$F%m%0%$%s$7!"(B
$B$=$N(B suid-root $B%W%m%0%i%`$r;H$C$F%/%i%$%"%s%H$G$b(B root $B$K$J$k!"(B
$B$H$$$&$3$H$,$G$-$J$/$J$j$^$9!#(B
$B$5$i$K(B <TT
CLASS="USERINPUT"
><B
>noexec</B
></TT
> $B%*%W%7%g%s$r$D$1$l$P!"(B
$B%^%&%s%H$7$?%U%!%$%k%7%9%F%`$G$N%U%!%$%k$N<B9T$r6X;_$9$k$3$H$b$G$-$^$9!#(B
$B$7$+$7$3$l$O(B nosuid $B$KHf$Y$k$H$"$^$j<BMQE*$G$O$J$$$G$7$g$&!#(B
$B%U%!%$%k%7%9%F%`$K$O>/$J$/$H$b(B
$B<B9T$9$Y$-%9%/%j%W%H$d%W%m%0%i%`$,4^$^$l$F$$$k$G$7$g$&$+$i!#(B
</P
></DIV
><DIV
CLASS="SECT3"
><H3
CLASS="SECT3"
><A
NAME="BROKENSUID"
>6.3.2. broken_suid $B%^%&%s%H%*%W%7%g%s(B</A
></H3
><P
> $B8E$$%W%m%0%i%`(B (<B
CLASS="COMMAND"
>xterm</B
> $B$J$I$,$=$&$G$9(B) $B$G$O!"(B
root $B$O$I$3$K$G$b=q$-9~$_2DG=$G$"$k!"(B
$B$H$$$&A0Ds$K0MB8$7$F$$$k$3$H$,$"$j$^$9!#(B
$B$3$l$O?7$7$$%+!<%M%k$H(B NFS $B%^%&%s%H$N2<$G$O@.N)$7$^$;$s!#(B
$B$3$N$h$&$J(B suid $BF0:n$r9T$&%W%m%0%i%`$O!"(B
uid $B%^%C%T%s%0$r9T$&(B nfs $B%5!<%P$G$O!"(B
uid $B$rJQ99$9$k$N$KMxMQ$G$-$F$7$^$&$?$a!"(B
$B%;%-%e%j%F%#>eLdBj$H$J$j$^$9!#(B
$B=>$C$F(B linux $B%+!<%M%k$N%G%U%)%k%H$G$O!"(B
$B$3$N(B <TT
CLASS="USERINPUT"
><B
>broken_suid</B
></TT
> $B$OL58z$K$J$C$F$$$^$9!#(B
</P
><P
> $B$+$$$D$^$s$G8@$$$^$9$H!"8E$$(B linux $B%G%#%9%H%j%S%e!<%7%g%s$G(B
$B$"$k<o$N(B suid $B%W%m%0%i%`$r;H$&>l9g$d!"(B
$B$J$s$i$+$N8E$$(B unix $B$r;H$C$F$$$k>l9g$O!"(B
$B%^%&%s%H$N:]$K(B
<B
CLASS="COMMAND"
>mount</B
> $B$K(B
<TT
CLASS="USERINPUT"
><B
>broken_suid</B
></TT
>
$B%*%W%7%g%s$r;XDj$9$kI,MW$,$"$k$+$b$7$l$^$;$s!#(B
$B$7$+$7:G6a$N(B unix $B$d(B linux $B%G%#%9%H%j%S%e!<%7%g%s$N(B
<B
CLASS="COMMAND"
>xterm</B
> $B$N$h$&$J%W%m%0%i%`$O!"(B
suid $B$rI,MW$H$7$J$$DL>o$N<B9T%U%!%$%k$K$J$C$F$$$F!"(B
setuid $BF0:n$r9T$&%W%m%0%i%`$rJL$K8F$S=P$9$h$&$K$J$C$F$$$^$9!#(B
</P
><P
> $B$3$l$i$N%*%W%7%g%s$O!"%*%W%7%g%s$N%+%i%`$K!"(B
<TT
CLASS="USERINPUT"
><B
>rsize</B
></TT
> $B$d(B
<TT
CLASS="USERINPUT"
><B
>wsize</B
></TT
> $B$J$I$H$$$C$7$g$K%3%s%^$G6h@Z$C$F=q$-$^$9!#(B
</P
></DIV
><DIV
CLASS="SECT3"
><H3
CLASS="SECT3"
><A
NAME="SECURING-DAEMONS"
>6.3.3. $B%]!<%H%^%C%Q!"(Brpc.statd, rpc.lockd $B$r%/%i%$%"%s%H$G0BA4$K$9$k(B</A
></H3
><P
> nfs $B$N8=:_$N(B (2.2.18 $B0J9_(B) $B$N<BAu$G$O!"(B
$B%U%!%$%k%m%C%-%s%0$N$9$Y$F$N5!G=$,%5%]!<%H$5$l$F$$$^$9!#(B
$B$9$J$o$A%m%C%/5!G=$r@5$7$/F0:n$5$;$k$K$O!"%/%i%$%"%s%H$G(B
<B
CLASS="COMMAND"
>rpc.statd</B
> $B$H(B <B
CLASS="COMMAND"
>rpc.lockd</B
>
$B$r<B9T$9$kI,MW$,$"$j$^$9!#(B
$B=>$C$F!"$3$l$^$G(B nfs $B$N%5!<%P$G8+$F$-$?LdBj$,!"(B
$B$=$N$^$^%/%i%$%"%s%H$K$bEv$F$O$^$j$^$9!#(B
$B>e5-$N%]!<%H%^%C%Q$N@a$r$b$&0lEYFI$s$G!"(B
$B%]!<%H%^%C%Q$r0BA4$K$9$k$?$a$N>pJs$r:F3NG'$7$F$/$@$5$$!#(B
</P
></DIV
></DIV
><DIV
CLASS="SECT2"
><H2
CLASS="SECT2"
><A
NAME="FIREWALLS"
>6.4. NFS $B$H%U%!%$%"%&%)!<%k(B (ipchains $B$H(B iptables)</A
></H2
><P
> IPchains (2.2.x $B%+!<%M%k(B) $B$H(B iptables (2.4.x $B%+!<%M%k(B)
$B$rMQ$$$k$H!"9b$$0BA4@-$r<B8=$G$-$^$9!#(B
$BC/$,@\B3$G$-$k$+$N7hDj$r%G!<%b%s$K(B ($B$"$k$$$O$3$N>l9g$O(B tcp $B%i%C%Q!<$K(B)
$B9T$o$;$k$N$G$O$J$/!"@\B3$N;n$_$r$h$j2<AX$G5v2D(B/$B5qH]$9$k$N$G$9!#(B
$B$3$N>l9g!"@\B3$r$h$jAa$$CJ3,$G!"$^$?$h$j%0%m!<%P%k$K@ZCG$G$-!"(B
$B$"$i$f$k967b$+$i%^%7%s$r<i$k$3$H$,$G$-$k$N$G$9!#(B
</P
><P
> Linux $B$N%U%!%$%"%&%)!<%k$r$I$&@_Dj$9$k$+$O!"(B
$B$3$NJ8=q$NHO0O$rBg$-$/1[$($F$$$^$9!#(B
$B6=L#$r;}$C$?FI<T$O(B Firewall-HOWTO $B$d(B
<A
HREF="http://www.linuxdoc.org/HOWTO/IPCHAINS-HOWTO.html"
TARGET="_top"
>IPCHAINS-HOWTO</A
>
$B$r8+$F$/$@$5$$(B
(<A
HREF="http://www.linux.or.jp/JF/JFdocs/IPCHAINS-HOWTO.html"
TARGET="_top"
>$BF|K\8lLu(B</A
>$B$,(B JF $B$K$"$j$^$9(B)$B!#%+!<%M%k(B 2.4 $B0J9_$N%f!<%6$O!"(B
<A
HREF="http://netfilter.samba.org"
TARGET="_top"
>http://netfilter.samba.org</A
>
$B$K$"$k(B netfilter/iptables $B%&%'%V%Z!<%8$K$$$C$F$_$F$/$@$5$$(B
$B$9$G$K(B ipchains $B$d(B netfilter $B$NF0:n$r=OCN$7$F$$$k?M$K$O!"(B
$B%U%!%$%"%&%)!<%k$H(B NFS $B$r$I$&@_Dj$9$k$+$K4X$7$F!"(B
$B$3$N@a$NFbMF$O$$$/$D$+$N%R%s%H$rM?$($F$/$l$k$G$7$g$&!#(B
</P
><P
> $B%U%!%$%"%&%)!<%k$N@_Dj$K$*$$$F=>$&$Y$-%k!<%k$O!"(B
$B$^$:$9$Y$F$r6X;_$7!">/$7$@$15v2D$9$k$3$H$G$9!#(B
$B$3$&$9$l$P0U?^$7$J$$5v2D$r4V0c$C$FDL$5$:$K$9$_$^$9!#(B
</P
><P
> $B9MN8$9$Y$-%]!<%H$O0J2<$NDL$j(B:
<P
></P
><OL
TYPE="a"
><LI
><P
>$B%]!<%H%^%C%Q$O(B 111 (tcp $B$H(B udp) $B$G$9!#(B</P
></LI
><LI
><P
> nfsd $B$O(B 2049 $B$G!"(BTCP $B$N$3$H$b(B UDP $B$N$3$H$b$"$j$^$9!#(B
NFS over TCP $B$O%5!<%P$G$O$^$@<B83CJ3,$J$N$G!"(B
$B%5!<%P$G$O$[$\(B UDP $B$@$1$G$7$g$&$,!"(B
$B%/%i%$%"%s%HB&$G$N(B TCP $B$NMxMQ$O$+$J$j0BDj$7$F$$$^$9!#(B
</P
></LI
><LI
><P
> <B
CLASS="COMMAND"
>mountd</B
>, <B
CLASS="COMMAND"
>lockd</B
>,
<B
CLASS="COMMAND"
>statd</B
> $B$O$"$A$3$AF0$-2s$j$^$9(B
($B$3$l$,$=$b$=$b%]!<%H%^%C%Q$,I,MW$JMxMQ$G$7$?(B) -
$B$3$l$,LdBj$N860x$K$J$j$^$9!#(B
$B$3$l$r07$&$K$O4pK\E*$K(B 2 $B$D$N$d$jJ}$,$"$j$^$9!#(B
<P
></P
><OL
TYPE="i"
><LI
><P
> $B$[$\$9$Y$F$N%]!<%H$r:I$$$G$*$/$,!"(B
$BFCDj$N(B IP $B$K$D$$$F$OBgItJ,$N%]!<%H$rL@<(E*$K3+$1$k!#(B
</P
></LI
><LI
><P
> $B$3$l$i$N%f!<%F%#%j%F%#$N:G6a$N%P!<%8%g%s$G$O!"(B
"-p" $B%*%W%7%g%s$K$h$C$FFCDj$N%]!<%H$rMxMQ$G$-$k$h$&$K$J$C$F$$$^$9!#(B
$B<+J,$N;H$C$F$$$k%P!<%8%g%s$,%5%]!<%H$7$F$$$k$+$I$&$+$O(B
man $B%Z!<%8$r8+$F$/$@$5$$!#$3$&$9$l$P!"(B
NFS $B%/%i%$%"%s%H%^%7%s$+$i$N$3$l$i$N%]!<%H$X$N%"%/%;%9$N$_$r5v$7!"(B
$B%m!<%+%k%M%C%H%o!<%/$+$i$G$bB>$N$9$Y$F$N%]!<%H$O:I$0$h$&$K$G$-$^$9!#(B
</P
></LI
></OL
>
</P
></LI
></OL
>
</P
><P
> $BA0<T$NJ}$r:NMQ$9$k>l9g$O!"(BIPCHAINS $B$G$O<!$N$h$&$K$J$j$^$9!#(B
<TABLE
BORDER="0"
BGCOLOR="#E0E0E0"
WIDTH="100%"
><TR
><TD
><FONT
COLOR="#000000"
><PRE
CLASS="PROGRAMLISTING"
> ipchains -A input -f -j ACCEPT
ipchains -A input -s trusted.net.here/trusted.netmask -d host.ip/255.255.255.255 -j ACCEPT
ipchains -A input -s 0/0 -d 0/0 -p 6 -j DENY -y -l
ipchains -A input -s 0/0 -d 0/0 -p 17 -j DENY -l
</PRE
></FONT
></TD
></TR
></TABLE
>
</P
><P
> $BF1$8@_Dj$r(B iptables (2.4 $B$G$N%U%!%$%"%&%)!<%k%D!<%k(B)
$B$G9T$&$H<!$N$h$&$K$J$j$^$9!#(B
<TABLE
BORDER="0"
BGCOLOR="#E0E0E0"
WIDTH="100%"
><TR
><TD
><FONT
COLOR="#000000"
><PRE
CLASS="PROGRAMLISTING"
>
iptables -A INPUT -f -j ACCEPT
iptables -A INPUT -s trusted.net.here/trusted.netmask -d \
host.ip/255.255.255.255 -j ACCEPT
iptables -A INPUT -s 0/0 -d 0/0 -p 6 -j DENY --syn --log-level 5
iptables -A INPUT -s 0/0 -d 0/0 -p 17 -j DENY --log-level 5
</PRE
></FONT
></TD
></TR
></TABLE
>
</P
><P
> $B:G=i$N9T$O$9$Y$F$N%Q%1%C%H%U%i%0%a%s%H$r5v2D$9$k(B
($B$?$@$7:G=i$N%Q%1%C%H%U%i%0%a%s%H$r=|$/!#(B
$B$3$l$ODL>o$N%Q%1%C%H$HF1$8$K07$o$l$^$9(B) $B$3$H$r<($7$^$9!#(B
$BM}O@E*$K$O:F9=@.$5$l$k$^$G%Q%1%C%H$,DL$k$3$H$O$J$/!"(B
$B$^$?:G=i$N%U%i%0%a%s%H$,DL$k$^$G:F9=@.$O9T$o$l$^$;$s!#(B
$B$b$A$m$s%Q%1%C%H%U%i%0%a%s%H$rMQ$$$F!"(B
$B%^%7%s$NIi2Y$r$"$2$k$h$&$J967b$O2DG=$K$J$C$F$7$^$$$^$9!#(B
$B$7$+$7(B NFS $B$O%U%i%0%a%s%H$rDL$5$J$$$H@5$7$/F0:n$7$^$;$s!#(B
$B>\:Y$O(B <A
HREF="troubleshooting.html"
>Section 7</A
> $B$r8+$F$/$@$5$$!#(B
</P
><P
> $BB>$N(B 3 $B9T$O!"%m!<%+%k%M%C%H%o!<%/$O?.Mj$9$k$,!"(B
$B$=$l0J30$O$9$Y$F5qH]$7$F5-O?$9$k$h$&$K$7$F$$$^$9!#(B
$B$3$l$OLZL\$N:Y$+$J$9$P$i$7$$@_Dj$H$$$&$o$1$G$O$J$$$G$9$,!"(B
$B$h$j>\:Y$J%k!<%k@_Dj$O$3$3$G$N5DO@$NHO0O$r1[$($F$$$^$9!#(B
</P
><P
> $B$h$j5?$$?<$/!"873J$J%k!<%k$r@_Dj$r$7$?$$?M8~$1$K!"(B
$B$$$/$D$+>pJs8;$r<($7$F$*$-$^$9!#(B
<B
CLASS="COMMAND"
>statd</B
>,
<B
CLASS="COMMAND"
>rquotad</B
>,
<B
CLASS="COMMAND"
>mountd</B
>,
<B
CLASS="COMMAND"
>lockd</B
>
$B$,0\F0$9$k$4$H$K(B ($B$"$jF@$k$3$H$G$9(B)
$B%U%!%$%"%&%)!<%k$N%k!<%k$r:F@_Dj$9$k$3$H$r7h$a$?>l9g$O!"(B
nfs $B%/%i%$%"%s%H$+$i$N%U%i%0%a%s%H$rDL$9$h$&$K(B
$B%5!<%P$r@_Dj$9$kI,MW$,$"$j$^$9!#(B
$B$5$b$J$$$H!"%U%i%0%a%s%H$N5qH]$K4X$7$F!"(B
$BHs>o$KIT;W5D$JJs9p$r%+!<%M%k$+$i<u$1$k$3$H$K$J$j$^$9!#(B
$B$3$N%a%C%;!<%8$G$O!"%/%i%$%"%s%H$N%]!<%H(B 65535 $B$+$i(B
$B%5!<%P$N%]!<%H(B 65535 $B$X$N%Q%1%C%H$,5qH]$5$l$?!"$H8@$&$O$:$G$9!#(B
$B%U%i%0%a%s%H$r5v2D$9$l$P$3$NLdBj$O2r7h$G$-$^$9!#(B
</P
></DIV
><DIV
CLASS="SECT2"
><H2
CLASS="SECT2"
><A
NAME="SUMMARY"
>6.5. $B$^$H$a(B</A
></H2
><P
> <TT
CLASS="FILENAME"
>hosts.allow</TT
>, <TT
CLASS="FILENAME"
>hosts.deny</TT
>,
<TT
CLASS="USERINPUT"
><B
>root_squash</B
></TT
>, <TT
CLASS="USERINPUT"
><B
>nosuid</B
></TT
>,
$BFC8"%]!<%H$N5!G=$J$I$r%]!<%H%^%C%Q$d(B nfs $B%=%U%H%&%'%"$KMQ$$$l$P!"(B
$B8=:_(B nfs $B$GCN$i$l$F$$$kB?$/$N%P%0$rHr$1$k$3$H$,$G$-!"(B
$B>/$J$/$H$b$*$*$`$M0BA4$K$J$C$?$H9M$($k$3$H$,$G$-$k$G$7$g$&!#(B
$B$7$+$7$=$l$G$b7k6I$N$H$3$m!"?/F~<T$,%M%C%H%o!<%/$K%"%/%;%9$G$-$F$7$^$($P!"(B
$B2x$7$$%3%^%s%I$r(B <TT
CLASS="FILENAME"
>.forward</TT
> $B$K=q$$$?$j!"(B
<TT
CLASS="FILENAME"
>/home</TT
> $B$d(B <TT
CLASS="FILENAME"
>/var/mail</TT
> $B$,(B
NFS $B%(%/%9%]!<%H$5$l$F$$$l$P%a!<%k$rFI$s$@$j$G$-$F$7$^$$$^$9!#(B
$B$^$?F1$8M}M3$+$i!"(BPGP $B$NHkL)80$O(B nfs $B>e$KCV$$$F$O$J$j$^$;$s!#(B
$B>/$J$/$H$b4m81@-$,$"$k$3$H$OCN$C$F$*$/$Y$-$G$9!#(B
$B$$$^$dCN$C$?$o$1$G$9$1$I!#(B
</P
><P
> NFS $B$H%]!<%H%^%C%Q$OJ#;($J%7%9%F%`$K$J$C$F$$$k$N$G!"(B
$B?7$7$$%P%0$,!"4pK\E*$J@_7W$K$;$h2f!9$NMQ$$$F$$$k<BAu$K$;$h!"(B
$B>-Mh8+$D$+$i$J$$$H$O;W$($^$;$s!#(B
$B$$$^$G$b?7$7$$7j$,$o$+$C$F$$$F!"(B
$BC/$+$,$=$l$r0-MQ$7$F$$$k$+$b$7$l$^$;$s!#(B
$B$G$b$=$l$,?M@8$H$$$&$b$N$G$9!#(B
</P
></DIV
></DIV
><DIV
CLASS="NAVFOOTER"
><HR
ALIGN="LEFT"
WIDTH="100%"><TABLE
WIDTH="100%"
BORDER="0"
CELLPADDING="0"
CELLSPACING="0"
><TR
><TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
><A
HREF="performance.html"
>Prev</A
></TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
><A
HREF="index.html"
>Home</A
></TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
><A
HREF="troubleshooting.html"
>Next</A
></TD
></TR
><TR
><TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
>NFS $B$N@-G=$r:GE,2=$9$k(B</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
> </TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
>$B%H%i%V%k%7%e!<%H(B</TD
></TR
></TABLE
></DIV
></BODY
></HTML
>
