Web host forum - system (/). There are security implications of sharing

system (/). There are security implications of sharing the whole file system or sensitive parts of it (such as /etc). Security options that you can add to your /etc/exports file are described below. Tip The linuxconf command can be used to add exported directories to /etc/exports. Select Exported file systems (NFS) from the left column (under Config Networking Server tasks). Buttons on the page let you choose a few options that affect write privileges, root privileges, symbolic links, and security. (If you add an entry this way, check /etc/exports later to see what you have done.) The format of the /etc/exports file is: Directory Host(Options) # Comments Directory is the name of the directory that you want to share. Host indicates the host computer that the sharing of this directory is restricted to. Options can include a variety of options to define the security measures attached to the shared directory for the host. (You can repeat Host/Option pairs.) Comments are any optional comments you want to add (following the # sign). Hostnames in /etc/exports You can indicate in the/etc/exports file which host computers can have access to your shared directory in the following ways: Individual host You can enter one or more TCP/IP hostnames or IP Addresses. If the host is in your local domain, you can simply indicate the hostname. Otherwise, you can use the full host.domain format. These are valid ways of indicating individual host computers: maple maple.handsonhistory.com 10.0.0.11 IP network To allow access to all hosts from a particular network address, indicate a network number and its netmask, separated by a slash (/). These are valid ways of indicating network numbers: 10.0.0.0/255.0.0.0 172.16.0.0/255.255.0.0 192.168.18.0/255.255.255.0 TCP/IP domain Using wild cards, you can include all or some host computers from a particular domain level. Here are some valid uses of the asterisk and question mark wild cards: *.handsonhistory.com *craft.handsonhistory.com ???.handsonhistory.com The first example matches all hosts in the handsonhistory.com domain. The second example matches woodcraft, basketcraft, or any other hostnames ending in craft in the handsonhistory.com domain. The final example matches any three-letter hostnames in the domain. Note Using an asterisk doesn t match subdomains. For example, *.handsonhistory.com would not cause the hostname mallard.duck.handsonhistory.com to be included in the access list. NIS groups You can allow access to hosts contained in an NIS group. To indicate a NIS group, precede the group name with an at (@) sign (for example, @group).
Please visit Domain Name Hosting services for high quality webhost to host and run your jsp applications.

Leave a Reply