Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!csd4.csd.uwm.edu!cs.utexas.edu!uunet!mcsun!ukc!warwick!cudcv From: cudcv@warwick.ac.uk (Rob McMahon) Newsgroups: comp.protocols.nfs Subject: Security of PC-NFS Message-ID: <188@titania.warwick.ac.uk> Date: 26 Aug 89 16:12:06 GMT Reply-To: cudcv@warwick.ac.uk (Rob McMahon) Organization: Computing Services, Warwick University, UK Lines: 17 Are there any plans to make PC-NFS at least moderately secure ? I have had my fears about it, and an article here not long ago confirmed that the uid & gid are kept unencrypted and alterable on the PC, so that anyone using PC-NFS can trivially pretend to be any usercode he feels like by poking these values. Clearly this is unacceptable for use on any but very trusted PCs. We are looking for a network file system for use on PCs in public work areas, ideally NFS since that is what we use on the Unix mainframes. Does anyone know if Novell is any better, I hear it is available, or will be available, for Unix. Where does Kerberos fit into the picture ? Thanks, Rob -- UUCP: ...!mcvax!ukc!warwick!cudcv PHONE: +44 203 523037 JANET: cudcv@uk.ac.warwick ARPA: cudcv@warwick.ac.uk Rob McMahon, Computing Services, Warwick University, Coventry CV4 7AL, England