V-935

CAT II (Medium)

The Network File System (NFS) server must not allow remote root access.

Rule ID

SV-46125r1_rule

STIG

Version

V1R12

CCIs

If the NFS server allows root access to local file systems from remote hosts, this access could be used to compromise the system.

List the exports.
# cat /etc/exports
If any export contains "no_root_squash" or does not contain "root_squash" or "all_squash", this is a finding.

Edit the "/etc/exports" file and add "root_squash" (or "all_squash") and remove "no_root_squash".