EXPORTS

̾Á°

½ñ¼°

ÀâÌÀ

¤³¤Î¥Õ¥¡¥¤¥ë¤Î½ñ¼°¤Ï SunOS ¤Î exports ¥Õ¥¡¥¤¥ë¤È¤Û¤ÜƱ¤¸¤Ç¤¢¤ë¡£¤¿¤À¤·»ØÄê¤Ç¤­¤ë¥ª¥×¥·¥ç¥ó¤¬ ¤¤¤¯¤Ä¤«Äɲ䵤ì¤Æ¤¤¤ë¡£ ¤½¤ì¤¾¤ì¤Î¹Ô¤Ë¤Ï¡¢¥Þ¥¦¥ó¥È¥Ý¥¤¥ó¥È¤È¡¢¤½¤Î¥Ý¥¤¥ó¥È¤Ë¤¢¤ë ¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤ò¥Þ¥¦¥ó¥È¤Ç¤­¤ë¥Þ¥·¥ó¡¦¥Í¥Ã¥È¥°¥ë¡¼¥×¤Î¥ê¥¹¥È ¤¬½ñ¤«¤ì¤Æ¤¤¤ë¡£ ¥Þ¥¦¥ó¥È¥Ñ¥é¥á¡¼¥¿¤Î¥ê¥¹¥È¤ò³ç¸Ì¤Ç¤¯¤¯¤Ã¤¿¤â¤Î¤ò¡¢ ¤½¤ì¤¾¤ì¤Î¥Þ¥·¥ó¤Î̾Á°¤Î¸å¤ËÃÖ¤¯¤³¤È¤â¤Ç¤­¤ë¡£ ¶õ¹Ô¤Ï̵»ë¤µ¤ì¡¢# ¤Ï¹ÔËö¤Þ¤Ç¤¬¥³¥á¥ó¥È¤Ç¤¢¤ë¤³¤È¤ò¼¨¤¹¡£ ¹ÔËö¤Ë¥Ð¥Ã¥¯¥¹¥é¥Ã¥·¥å¤ò¤ª¤±¤Ð¡¢¥¨¥ó¥È¥ê¤Ï¼¡¤Î¹Ô¤Ë·Ñ³¤Ç¤­¤ë¡£

¥Þ¥·¥ó̾¤Î¥Õ¥©¡¼¥Þ¥Ã¥È

single host

¤³¤ì¤Ï¤â¤Ã¤È¤âÉáÄ̤Υե©¡¼¥Þ¥Ã¥È¤Ç¤¢¤ë¡£¥Û¥¹¥È¤Î»ØÄê¤Ë¤Ï¡¢ ¥ì¥¾¥ë¥Ð¤¬Ç§¼±¤Ç¤­¤ë¾Êά·Á¡¢ FQDN¡¢ IP ¥¢¥É¥ì¥¹¤Î¤É¤ì¤òÍѤ¤¤Æ¤â¤è¤¤¡£

netgroups

NIS ¤Î¥Í¥Ã¥È¥°¥ë¡¼¥×¤Ï @group ¤Î¤è¤¦¤ËÍ¿¤¨¤ë¤³¤È¤¬¤Ç¤­¤ë¡£¥Í¥Ã¥È¥°¥ë¡¼¥×¤Î¤¹¤Ù¤Æ¤Î¥á¥ó¥Ð¡¼¤Î¤¦¤Á¡¢ ¥Û¥¹¥È¤ÎÉôʬ¤À¤±¤¬¼è¤ê½Ð¤µ¤ì¡¢¥¢¥¯¥»¥¹¥ê¥¹¥È¤ËÄɲ䵤ì¤ë¡£ ¥Û¥¹¥È¤ÎÉôʬ¤¬¶õ¤À¤Ã¤¿¤ê¡¢Ã±°ì¤Î¥À¥Ã¥·¥å (-) ¤À¤Ã¤¿¤â¤Î¤Ï̵»ë¤µ¤ì¤ë¡£ ¥Þ¥·¥ó̾¤Î»ØÄê¤Ë¤Ï¡¢¥ï¥¤¥ë¥É¥«¡¼¥Éʸ»ú¤È¤·¤Æ * ¤È ? ¤ò ÍѤ¤¤ë¤³¤È¤¬¤Ç¤­¤ë¡£¤³¤ì¤é¤ò»È¤¦¤È exports ¥Õ¥¡¥¤¥ë¤ò¥³¥ó¥Ñ¥¯¥È ¤Ë¤Ç¤­¤ë¡£ Î㤨¤Ð *.cs.foo.edu ¤Ï¥É¥á¥¤¥ó cs.foo.edu ¤Ë¤¢¤ë¤¹¤Ù¤Æ¤Î ¥Û¥¹¥È¤Ë¥Þ¥Ã¥Á¤¹¤ë¡£¤¿¤À¤·¡¢¤³¤ì¤é¤Î¥ï¥¤¥ë¥É¥«¡¼¥Éʸ»ú¤Ï¥É¥á¥¤¥ó̾¤Î ¥É¥Ã¥È (.) ¤Ë¤Ï¥Þ¥Ã¥Á¤·¤Ê¤¤¡£¤·¤¿¤¬¤Ã¤Æ¾åµ­¤Î¥Ñ¥¿¡¼¥ó¤Ï¡¢¥É¥á¥¤¥óÆâ¤Î a.b.cs.foo.edu ¤Î¤è¤¦¤Ê¥Û¥¹¥È¤Ë¤Ï¥Þ¥Ã¥Á¤·¤Ê¤¤¡£

IP networks

¥Ç¥£¥ì¥¯¥È¥ê¤ò IP ¤Î (¥µ¥Ö) ¥Í¥Ã¥È¥ï¡¼¥¯¤Ë¸ºß¤¹¤ë¤¹¤Ù¤Æ¤Î¥Û¥¹¥È¤Ë Ʊ»þ¤Ë¥¨¥¯¥¹¥Ý¡¼¥È¤¹¤ë¤³¤È¤â¤Ç¤­¤ë¡£¤³¤ì¤Ë¤Ï IP ¥¢¥É¥ì¥¹¤È¥Í¥Ã¥È¥Þ¥¹¥¯¤Î ¥Ú¥¢¤ò address/netmask ¤Î¤è¤¦¤Ë»ØÄꤹ¤ì¤Ð¤è¤¤¡£

=public

¤³¤ì¤ÏÆüì¤Ê°ÕÌ£¤ò»ý¤Ä¡Ö¥Û¥¹¥È̾¡×¤Ç¡¢¤½¤ÎÁ°¤ËÍ¿¤¨¤é¤ì¤¿¥Ç¥£¥ì¥¯¥È¥ê ¤¬ public root ¥Ç¥£¥ì¥¯¥È¥ê¤Ç¤¢¤ë¤³¤È¤ò¼¨¤¹ (WebNFS ¤È public root ¥Ï¥ó¥É¥ë¤Î¾ÜºÙ¤Ë´Ø¤·¤Æ¤Ï nfsd(8) ¤Î WebNFS ¤Î¥»¥¯¥·¥ç¥ó¤ò»²¾È¤Î¤³¤È)¡£¤³¤Î½ñ¼°¤òÍѤ¤¤ëºÝ¤Ë¤Ï¡¢ =public ¤¬¤½¤Î¹Ô¤Ç¤ÎÍ£°ì¤Î¥Û¥¹¥È̾¥¨¥ó¥È¥ê¤Ç¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£¤Þ¤¿ ¥¨¥¯¥¹¥Ý¡¼¥È¥ª¥×¥·¥ç¥ó¤ò»ØÄꤷ¤Æ¤Ï¤Ê¤é¤Ê¤¤¡£¤³¤Î»ØÄê¤Ë¤è¤Ã¤Æ¡¢ ¥Ç¥£¥ì¥¯¥È¥ê¤¬¼ÂºÝ¤Ë¥¨¥¯¥¹¥Ý¡¼¥È¤µ¤ì¤ë¤ï¤±¤Ç¤Ï¤Ê¤¤¤³¤È¤Ë Ãí°Õ¤¹¤ë¤³¤È¡£¥¨¥¯¥¹¥Ý¡¼¥È¥ª¥×¥·¥ç¥ó¤ò¡¢ ¤³¤ì¤È¤ÏÊ̤Υ¨¥ó¥È¥ê¤Ç»ØÄꤹ¤ëɬÍפ¬¤¢¤ë¡£

public root ¥Ñ¥¹¤Ï nfsd ¤ò --public-root ¥ª¥×¥·¥ç¥ó¤ò»ØÄꤷ¤Æµ¯Æ°¤¹¤ë¤³¤È¤Ë¤è¤Ã¤Æ¤â»ØÄê¤Ç¤­¤ë¡£ public root ¤ÎÊ£¿ô»ØÄê¤Ï̵»ë¤µ¤ì¤ë¡£

°ìÈÌŪ¤Ê¥ª¥×¥·¥ç¥ó

secure

¤³¤Î¥ª¥×¥·¥ç¥ó¤ò»ØÄꤹ¤ë¤È¡¢IPPORT_RESERVED (1024)¤è¤ê¾®¤µ¤Ê internet ¥Ý¡¼¥È¤«¤éȯ¤·¤¿¥ê¥¯¥¨¥¹¥È¤·¤«¼õ¤±¤Ä¤±¤Ê¤¤¡£ ¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¥Ç¥Õ¥©¥ë¥È¤ÇÍ­¸ú¤Ë¤Ê¤Ã¤Æ¤¤¤ë¡£ ¤³¤ì¤ò¥ª¥Õ¤Ë¤¹¤ë¤Ë¤Ï insecure ¤È»ØÄꤷ¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£

ro

¤³¤Î NFS ¥Ü¥ê¥å¡¼¥à¤ËÂФ·¤Æ¡¢Æɤ߽Ф·¥ê¥¯¥¨¥¹¥È¤Î¤ß¤òµö²Ä¤¹¤ë¡£ ¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï½ñ¤­¹þ¤ß¤Î¥ê¥¯¥¨¥¹¥È¤âµö²Ä¤¹¤ë (¤³¤ì¤Ï rw ¥ª¥×¥·¥ç¥ó¤ÇÌÀ¼¨¤·¤¿¾ì¹ç¤âƱ¤¸)¡£

noaccess

¤³¤Î¥ª¥×¥·¥ç¥ó¤òÉÕ¤±¤¿¥¯¥é¥¤¥¢¥ó¥È¤Ï¡¢¤½¤Î¥Ç¥£¥ì¥¯¥È¥ê°Ê²¼¤Î¤¹¤Ù¤Æ¤Î ¥Õ¥¡¥¤¥ë¤ËÂФ·¤Æ¥¢¥¯¥»¥¹¤Ç¤­¤Ê¤¯¤Ê¤ë¡£¤¢¤ë¥Ç¥£¥ì¥¯¥È¥ê³¬Áؤò ¥¯¥é¥¤¥¢¥ó¥È¤Ë¥¨¥¯¥¹¥Ý¡¼¥È¤¹¤ë¤È¤­¡¢ÆÃÄê¤Î¥µ¥Ö¥Ç¥£¥ì¥¯¥È¥ê¤ò½ü¤­¤¿¤¤ ¾ì¹ç¤Ê¤É¤ËÊØÍø¤Ç¤¢¤ë¡£ noaccess ¥Õ¥é¥°¤¬ÉÕ¤¤¤¿¥Ç¥£¥ì¥¯¥È¥ê¤Î ¥¯¥é¥¤¥¢¥ó¥È¤«¤é¤Î¸«¤¨Êý¤Ï¡¢Èó¾ï¤ËÀ©¸Â¤µ¤ì¤¿¤â¤Î¤È¤Ê¤ë¡£ ¥Ç¥£¥ì¥¯¥È¥ê°À­¤È¡¢ `.' ¤ª¤è¤Ó `..' ¤Î±ÜÍ÷¤À¤±¤¬µö¤µ¤ì¤ë¡£ readdir ¤ËÂФ·¤ÆÊÖ¤µ¤ì¤ë¥¨¥ó¥È¥ê¤â¤³¤Î 2 ¤Ä¤À¤±¤Ë¤Ê¤ë¡£

link_relative

ÀäÂХѥ¹·Á¼°¤Î¥·¥ó¥Ü¥ê¥Ã¥¯¥ê¥ó¥¯¤òÁêÂХѥ¹·Á¼°¤Î¥ê¥ó¥¯¤ËÊÑ´¹¤¹¤ë (ÀäÂХѥ¹·Á¼°¤È¤Ï¡¢¥ê¥ó¥¯¤ÎÆâÍƤ¬ "/" ¤Ç»Ï¤Þ¤ë¤â¤Î¤Ç¤¢¤ë)¡£ ÊÑ´¹¤Ï¼¡¤Î¤è¤¦¤Ë¹Ô¤ï¤ì¤ë¡£ ¤Þ¤º¥ê¥ó¥¯¤¬ÃÖ¤«¤ì¤Æ¤¤¤ë¥Ç¥£¥ì¥¯¥È¥ê¤Î¡¢¥µ¡¼¥Ð¤Î¥ë¡¼¥È¤«¤é¤Î ¿¼¤µ¤ò¼èÆÀ¤¹¤ë¡£¤½¤·¤Æ¤½¤Î¿ô¤À¤± '../' ¤òÀäÂÐ¥ê¥ó¥¯¤ÎÁ°¤ËÉղ乤롣 ¥Þ¥¦¥ó¥È¥Ý¥¤¥ó¥È¤Î¥ë¡¼¥È¤«¤é¤Î°ÌÃÖ¤¬°Û¤Ê¤ë¾ì¹ç¡¢ ¤³¤ÎÊÑ´¹¤Ë¤ÏÈù̯¤Ê (¤ª¤½¤é¤¯¾ã³²¤Î¸¶°ø¤È¤Ê¤ë) ¤¢¤¤¤Þ¤¤¤µ¤¬ ´Þ¤Þ¤ì¤ë²ÄǽÀ­¤¬¤¢¤ë¡£

link_absolute

Á´¤Æ¤Î¥·¥ó¥Ü¥ê¥Ã¥¯¥ê¥ó¥¯¤ò¤½¤Î¤Þ¤Þ¤Ë¤¹¤ë¡£ ¤³¤ì¤¬¥Ç¥Õ¥©¥ë¥È¤Ç¤¢¤ë¡£

¥æ¡¼¥¶ ID ¤Î¥Þ¥Ã¥Ô¥ó¥°

¥µ¡¼¥Ð¥Þ¥·¥ó¾å¤Î¥Õ¥¡¥¤¥ë¤ËÂФ¹¤ë nfsd ¤Ë¤è¤ë¥¢¥¯¥»¥¹¥³¥ó¥È¥í¡¼¥ë¤Ï¡¢ ¤½¤ì¤¾¤ì¤Î NFS RPC request ¤ÎºÝ¤ËÍ¿¤¨¤é¤ì¤ë uid ¤È gid ¤Ë´ð¤Å¤¤¤Æ¤¤¤ë¡£ ¥æ¡¼¥¶¤ÏÄ̾ ¥µ¡¼¥Ð¾å¤Ë¤¢¤ë¼«Ê¬¤Î¥Õ¥¡¥¤¥ë¤Ë¤Ï¡¢¤½¤ì¤¬ÉáÄ̤Υե¡¥¤¥ë¥·¥¹¥Æ¥à¾å¤Ë ¤¢¤ë¤Î¤ÈƱÍͤ˥¢¥¯¥»¥¹²Äǽ¤Ç¤¢¤ë¤³¤È¤ò´üÂÔ¤·¤Æ¤¤¤ë¡£ ¤³¤ì¤Ë¤Ï¥¯¥é¥¤¥¢¥ó¥È¤È¥µ¡¼¥Ð¾å¤ÇÍѤ¤¤é¤ì¤ë uid ¤È gid ¤¬¤½¤ì¤¾¤ì Ʊ¤¸¤Ç¤¢¤ëɬÍפ¬¤¢¤ë¤¬¡¢ ¤³¤ì¤Ï¾ï¤Ë¿¿¤Ç¤¢¤ë¤È¤Ï¸Â¤é¤º¡¢Ë¾¤Þ¤·¤¤¤È¤â¸Â¤é¤Ê¤¤¡£

¥¯¥é¥¤¥¢¥ó¥È¥Þ¥·¥ó¤Î root ¤¬ NFS ¥µ¡¼¥Ð¤Î¥Õ¥¡¥¤¥ë¤Ë¥¢¥¯¥»¥¹¤¹¤ë¤È¤­¡¢ ¥µ¡¼¥Ð¤Î root ¤È¤·¤Æ°·¤ï¤ì¤Æ¤·¤Þ¤¦¤Î¤Ï¡¢¤Û¤È¤ó¤É¤Î¾ì¹ç¤Ï˾¤Þ¤·¤¯¤Ê¤¤¡£ ¤³¤Î¤¿¤á uid 0 ¤ÏÉáÄ̤ÏÊ̤Πid (anonymous ¤ä nobody uid) ¤Ë¥Þ¥Ã¥Ô¥ó¥°¤µ¤ì¤ë¡£ ¤³¤ÎÆ°ºî¤Ï `root squashing' ¤È¸Æ¤Ð¤ì¤ë¤¬¡¢¤³¤ì¤¬¥Ç¥Õ¥©¥ë¥È¤Ç¤¢¤ë¡£ no_root_squash ¤ò»È¤¨¤Ð¥ª¥Õ¤Ë¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£

¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï¡¢ nfsd ¤Ï µ¯Æ°»þ¤Ë password ¥Õ¥¡¥¤¥ëÃæ¤Î nobody ¥æ¡¼¥¶¤ò»²¾È¤·¤Æ¡¢ anonymous ¤Î uid ¤È gid ¤òÆÀ¤è¤¦¤È¤¹¤ë¡£ ¤â¤·¤½¤ì¤¬¸«¤Ä¤«¤é¤Ê¤¤¾ì¹ç¤Ë¤Ï¡¢uid ¤È gid ¤È¤·¤Æ -2(¤Ä¤Þ¤ê 65534) ¤¬ ÍѤ¤¤é¤ì¤ë¡£ ¤³¤ì¤é¤Î¿ôÃÍ¤Ï anonuid ¤È anongid ¥ª¥×¥·¥ç¥ó¤Ë¤è¤ê¾å½ñ¤­²Äǽ¤Ç¤¢¤ë¡£

¤³¤ì¤Ë²Ã¤¨¡¢ nfsd ¤Ë¤è¤Ã¤Æ nobody ¤Ë³ä¤êÅö¤Æ¤ë¤Ù¤­Å¬Åö¤Ê uid ¤È gid ¤È¤ò»ØÄꤹ¤ë¤³¤È¤â¤Ç¤­¤ë¡£ ¤Þ¤¿ºÇ¸å¤ÎÊýË¡¤È¤·¤Æ¡¢ all_squash ¥ª¥×¥·¥ç¥ó¤ò»ØÄꤹ¤ì¤Ð¡¢ Á´¤Æ¤Î user request ¤ò anonymous uid ¤Ë³ä¤êÅö¤Æ¤ë¤³¤È¤â¤Ç¤­¤ë¡£

¥Þ¥·¥ó¤´¤È¤Ë uid ¤¬°Û¤Ê¤ë¤è¤¦¤Ê¾ì¹ç¤Ø¤ÎƳÆþ¤òÍưפˤ¹¤ë¤¿¤á¡¢ nfsd ¤Ç¤Ï¥µ¡¼¥Ð¤Î uid ¤ò¥¯¥é¥¤¥¢¥ó¥È¤Î uid ¤Ë (¤¢¤ë¤¤¤Ï¤½¤ÎµÕ¤Ë) ưŪ¤Ë¥Þ¥Ã¥Ô¥ó¥°¤¹¤ë¼êË¡¤ò¤¤¤¯¤Ä¤«Ä󶡤·¤Æ¤¤¤ë¡£ ÀÅŪ¤Ê¥Þ¥Ã¥Ô¥ó¥°¥Õ¥¡¥¤¥ë¡¢ NIS ¥Ù¡¼¥¹¤Î¥Þ¥Ã¥Ô¥ó¥°¡¢ ugidd ¥Ù¡¼¥¹¤Î¥Þ¥Ã¥Ô¥ó¥°¡¢¤Ç¤¢¤ë¡£

ugidd ¥Ù¡¼¥¹¤Î¥Þ¥Ã¥Ô¥ó¥°¤Ï map_daemon ¥ª¥×¥·¥ç¥ó¤ò»ØÄꤷ¤Æ UGID RPC ¥×¥í¥È¥³¥ë¤ò»È¤¨¤Ð²Äǽ¤È¤Ê¤ë¡£ ¤³¤Î¥×¥í¥È¥³¥ë¤òÆ°¤«¤¹¤Ë¤Ï¥¯¥é¥¤¥¢¥ó¥È¤Ç ugidd(8) mapping ¥Ç¡¼¥â¥ó¤òÆ°ºî¤µ¤»¤ëɬÍפ¬¤¢¤ë¡£ ¤³¤ì¤Ï 3 ¤Ä¤¢¤ëÊýË¡¤ÎÃæ¤Ç¡¢¥»¥­¥å¥ê¥Æ¥£Åª¤Ë¤ÏºÇ°­¤Ç¤¢¤ë¡£ ¤Ê¤¼¤Ê¤é ugidd ¤òÆ°ºî¤µ¤»¤ë¤È¡¢Ã¯¤Ç¤â¥¯¥é¥¤¥¢¥ó¥È¤ËÌ䤤¹ç¤ï¤»¤Æ¡¢Í­¸ú¤Ê¥æ¡¼¥¶Ì¾¤Î ¥ê¥¹¥È¤òÆþ¼ê¤Ç¤­¤Æ¤·¤Þ¤¦¤«¤é¤Ç¤¢¤ë¡£ ugidd ¤Ø¤Î¥¢¥¯¥»¥¹¤òÆÃÄê¤Î¥Û¥¹¥È¤Î¤ß¤ËÀ©¸Â¤·¤Æ¡¢¿È¤ò¼é¤ë¤³¤È¤â¤Ç¤­¤ë¡£ ¤³¤ì¤Ë¤Ïµö²Ä¤¹¤ë¥Û¥¹¥È¤Î¥ê¥¹¥È¤ò hosts.allow ¤Þ¤¿¤Ï hosts.deny ¥Õ¥¡¥¤¥ë¤Ëµ­½Ò¤¹¤ì¤Ð¤è¤¤¡£¥µ¡¼¥Ó¥¹Ì¾¤Ï ugidd ¤Ç¤¢¤ë¡£¤³¤ì¤é¤Î¥Õ¥¡¥¤¥ë¤Îʸˡ¤Ë¤Ä¤¤¤Æ¤Ï¡¢ hosts_access(5) ¤ò»²¾È¤·¤Æ¤Û¤·¤¤¡£

ÀÅŪ¤Ê¥Þ¥Ã¥Ô¥ó¥°¤Ï map_static ¥ª¥×¥·¥ç¥ó¤Ë¤è¤Ã¤ÆÆ°ºî¤µ¤»¤ë¤³¤È¤¬¤Ç¤­¤ë¡£¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¡¢¥Þ¥Ã¥Ô¥ó¥°¤ò µ­½Ò¤·¤¿¥Õ¥¡¥¤¥ë¤Î̾Á°¤ò¤ò°ú¿ô¤Ë¤È¤ë¡£ NIS ¥Ù¡¼¥¹¤Î¥Þ¥Ã¥Ô¥ó¥°¤Ï¡¢¥¯¥é¥¤¥¢¥ó¥È¤Î NIS ¥µ¡¼¥Ð¤ËÌ䤤¹ç¤ï¤»¤Æ¡¢ ¥µ¡¼¥Ð¡¼¤Î¥æ¡¼¥¶Ì¾¡¦¥°¥ë¡¼¥×̾¤«¤é¥¯¥é¥¤¥¢¥ó¥È¤Î¥æ¡¼¥¶Ì¾¡¦¥°¥ë¡¼¥×̾¤Ø¤Î ¥Þ¥Ã¥Ô¥ó¥°¾ðÊó¤òÆþ¼ê¤¹¤ë¡£

°Ê²¼¤Ë¥Þ¥Ã¥Ô¥ó¥°¥ª¥×¥·¥ç¥ó¤Î´°Á´¤Ê¥ê¥¹¥È¤ò¤¢¤²¤ë:

root_squash

uid/gid ¤¬ 0 ¤Î¥ê¥¯¥¨¥¹¥È¤ò annonymous uid/gid ¤Ë¥Þ¥Ã¥Ô¥ó¥°¤¹¤ë¡£ ¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¡¢ root °Ê³°¤Î uid ¤Ë¤ÏŬÍѤµ¤ì¤Ê¤¤¡£Â¾¤Ë¤â Ãí°Õ¤¹¤Ù¤­ uid ¤Ï¸ºß¤¹¤ë (Î㤨¤Ð bin ¤Ê¤É) ¤Î¤Ç¡¢Ãí°Õ¤¹¤ëɬÍפ¬¤¢¤ë¡£

no_root_squash

root squashing ¤ò̵¸ú¤Ë¤¹¤ë¡£ ¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¼ç¤Ë¥Ç¥£¥¹¥¯¥ì¥¹¥¯¥é¥¤¥¢¥ó¥È¤Ë¤È¤Ã¤ÆÊØÍø¤Ç¤¢¤ë¡£

squash_uids and squash_gids

¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¡¢annonymous ¤Ë¥Þ¥Ã¥Ô¥ó¥°¤µ¤ì¤ë uid ¤ä gid ¤Î¥ê¥¹¥È¤ò ÌÀ¼¨¤¹¤ë¤¿¤á¤Î¤â¤Î¤Ç¤¢¤ë¡£ id ¤Î¥ê¥¹¥È¤È¤·¤Æ¤Ï°Ê²¼¤Î¤è¤¦¤Ê»ØÄ꤬ͭ¸ú¤Ç ¤¢¤ë:

squash_uids=0-15,20,25-50

Ä̾ï¤Î squash ¥ê¥¹¥È¤Ï¤â¤Ã¤È¤º¤Ã¤È´Êñ¤Ê¤â¤Î¤Ë¤Ê¤ë¤À¤í¤¦¤¬¡£

all_squash

Á´¤Æ¤Î uid ¤Ègid ¤ò anonymous ¤Ë¥Þ¥Ã¥Ô¥ó¥°¤¹¤ë¡£ ¤³¤ì¤Ï NFS ¥¨¥¯¥¹¥Ý¡¼¥È¤µ¤ì¤¿¸ø³« FTP ¥Ç¥£¥ì¥¯¥È¥ê¤ä¡¢ news ¤Î¥¹¥×¡¼¥ë¥Ç¥£¥ì¥¯¥È¥êÅù¤ËÊØÍø¤Ç¤¢¤ë¡£ ¤³¤ì¤ÈµÕ¤Î¥ª¥×¥·¥ç¥ó¤Ï no_all_squash ¤Ç¤¢¤ê¡¢¤³¤Á¤é¤¬¥Ç¥Õ¥©¥ë¥È¤Ë¤Ê¤Ã¤Æ¤¤¤ë¡£

map_daemon

¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï ưŪ¤Ê uid/gid ¤Î¥Þ¥Ã¥Ô¥ó¥°¤òÍ­¸ú¤Ë¤¹¤ë¡£ NFS request Ãæ¤Î¤½¤ì¤¾¤ì¤Î uid ¤Ï¥µ¡¼¥Ð¾å¤ÎÂбþ¤¹¤ë uid ¤ËÊÑ´¹¤µ¤ì¡¢ NFS reply Ãæ¤Î uid ¤Ï¤½¤ì¤¾¤ìµÕ¤ËÊÑ´¹¤µ¤ì¤ë¡£ ¤³¤Î¥ª¥×¥·¥ç¥ó¤òÍѤ¤¤ë¤Ë¤Ï¡¢¥¯¥é¥¤¥¢¥ó¥È¥Û¥¹¥È¤Ç rpc.ugidd(8) ¤¬Æ°ºî¤·¤Æ¤¤¤ë¤³¤È¤¬É¬ÍפǤ¢¤ë¡£ ¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï¡¢Á´¤Æ¤Î uid ¤òÊѤ¨¤Ê¤¤ map_identity ¤È¤Ê¤Ã¤Æ¤¤¤ë¡£ ÉáÄ̤Πsquash ¥ª¥×¥·¥ç¥ó¤Ï¡¢Æ°Åª¤Ê¥Þ¥Ã¥Ô¥ó¥°¤«Èݤ«¤òµ¤¤Ë¤¹¤ë¤³¤È¤Ê¤¯ ŬÍѤǤ­¤ë¡£

map_static

¤³¤Î¥ª¥×¥·¥ç¥ó¤ò»ØÄꤹ¤ë¤ÈÀÅŪ¤Ê¥Þ¥Ã¥Ô¥ó¥°¤¬²Äǽ¤È¤Ê¤ë¡£ uid/gid ¥Þ¥Ã¥Ô¥ó¥°¤¬µ­½Ò¤µ¤ì¤¿¥Õ¥¡¥¤¥ë̾¤ò°Ê²¼¤Î¤è¤¦¤Ë»ØÄꤹ¤ë¡£

map_static=/etc/nfs/foobar.map

¥Õ¥¡¥¤¥ë¤Î¥Õ¥©¡¼¥Þ¥Ã¥È¤Ï°Ê²¼¤Î¤è¤¦¤Ê¤â¤Î¤Ç¤¢¤ë¡£

# Mapping for client foobar:
#    remote     local
uid  0-99       -       # squash these
uid  100-500    1000    # map 100-500 to 1000-1400
gid  0-49       -       # squash these
gid  50-100     700     # map 50-100 to 700-750

map_nis

¤³¤Î¥ª¥×¥·¥ç¥ó¤ò»ØÄꤹ¤ë¤È NIS ¥Ù¡¼¥¹¤Î uid/gid ¥Þ¥Ã¥Ô¥ó¥°¤¬²Äǽ¤È¤Ê¤ë¡£ Î㤨¤Ð¡¢¥µ¡¼¥Ð¤¬ uid 123 ¤Î»ØÄê¤ò¼õ¤±¤ë¤È¡¢¥µ¡¼¥Ð¤Ï¤Þ¤º¤½¤Î uid ¤Ë Âбþ¤¹¤ë¥í¡¼¥«¥ë¤Î¥í¥°¥¤¥ó̾¤òÄ´¤Ù¤ë¡£¼¡¤Ë NFS ¥¯¥é¥¤¥¢¥ó¥È¤Î NIS ¥µ¡¼¥Ð¤Ë Àܳ¤·¤Æ¡¢¤½¤Î¥í¥°¥¤¥ó̾¤ËÂбþ¤¹¤ë uid ¤ò¼èÆÀ¤¹¤ë¡£

¤³¤ì¤ò¹Ô¤¦¤Ë¤Ï¡¢ NFS ¥µ¡¼¥Ð¤¬¥¯¥é¥¤¥¢¥ó¥È¤Î NIS ¥É¥á¥¤¥ó¤ò ÃΤäƤ¤¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£¤³¤Î¥É¥á¥¤¥ó¤Ï map_nis ¥ª¥×¥·¥ç¥ó¤Î°ú¿ô¤È¤·¤Æ°Ê²¼¤Î¤è¤¦¤Ë»ØÄꤹ¤ë¡£

map_nis=foo.com

¤¿¤À¤³¤³¤Ë NIS ¥É¥á¥¤¥ó¤òµ­½Ò¤¹¤ë¤À¤±¤Ç¤Ï¡¢Ä̾ï¤Ï½¼Ê¬¤Ç¤Ï¤Ê¤¤¡£ nfsd ¤¬ NIS ¥µ¡¼¥Ð¤Ë¥³¥ó¥¿¥¯¥È¤Ç¤­¤ë¤è¤¦¤Ë¤¹¤ë¤Ë¤Ï¡¢Â¾¤Îºî¶È¤¬É¬Í×¤È ¤Ê¤ë¤À¤í¤¦¡£ÍøÍѤ·¤Æ¤¤¤ë¥Ç¥£¥¹¥È¥ê¥Ó¥å¡¼¥·¥ç¥ó¤¬ NYS ¥é¥¤¥Ö¥é¥ê¤ò »È¤Ã¤Æ¤¤¤ë¾ì¹ç¤Ï¡¢¥¯¥é¥¤¥¢¥ó¥È¤Î¥É¥á¥¤¥ó¤Î¥µ¡¼¥Ð¤ò /etc/yp.conf ¤Ë°ì¤Ä°Ê¾å»ØÄꤹ¤ëɬÍפ¬¤¢¤ë¤À¤í¤¦¡£ ¾¤Î NIS ¥é¥¤¥Ö¥é¥ê¤òÍѤ¤¤Æ¤¤¤ë¾ì¹ç¤Ë¤Ï¡¢ yp.conf ¤Ë¤è¤Ã¤ÆÀßÄê¤Ç¤­¤ë¤è¤¦¤Ê¡¢Æüì¤Ê ypbind(8) ¤òÆþ¼ê¤¹¤ëɬÍפ¬¤¢¤ë¤«¤â¤·¤ì¤Ê¤¤¡£

anonuid ¤ª¤è¤Ó anongid

¤³¤ì¤é¤Î¥ª¥×¥·¥ç¥ó¤Ï anonymous ¥¢¥«¥¦¥ó¥È¤Î uid ¤È gid ¤òÌÀ¼¨Åª¤Ë¥»¥Ã¥È ¤¹¤ë¡£¤³¤ì¤Ï¡¢Á´¤Æ¤Î¥ê¥¯¥¨¥¹¥È¤¬°ì¿Í¤Î¥æ¡¼¥¶¤«¤é¤Ë¤Ê¤ë¤è¤¦¤Ê PC/NFS clients ¤Ë¤È¤Ã¤Æ¼ç¤ËÍ­¸ú¤Ç¤¢¤ë¡£ Î㤨¤Ð¡¢ °Ê²¼¤Î¡ÖÎã¡×¤Î¥»¥¯¥·¥ç¥ó¤Ç¤Î /home/joe ¤Ê¤ë¥¨¥¯¥¹¥Ý¡¼¥È¥¨¥ó¥È¥ê¤ò¸«¤Æ¤Û¤·¤¤¡£ ¤³¤ÎÎã¤Ç¤Ï¡¢(joe ¤«¤é¤Î¤â¤Î¤Ç¤¢¤ë¤È»×¤ï¤ì¤ë) Á´¤Æ¤Î¥ê¥¯¥¨¥¹¥È¤¬ uid 150 ¤Ë ¥Þ¥Ã¥Ô¥ó¥°¤µ¤ì¤ë¡£

Îã

# sample /etc/exports file
/               master(rw) trusty(rw,no_root_squash)
/projects       proj*.local.domain(rw)
/usr            *.local.domain(ro) @trusted(rw)
/home/joe       pc001(rw,all_squash,anonuid=150,anongid=100)
/pub            (ro,insecure,all_squash)
/pub/private    (noaccess)

1 ¹ÔÌܤϡ¢ master ¤È trusty ¤ËÂФ·¤Æ¤¹¤Ù¤Æ¤Î¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤Î ¥Þ¥¦¥ó¥Èµö²Ä¤ò½Ð¤·¤Æ¤¤¤ë¡£ ½ñ¤­¹þ¤ß¤Îµö²Ä¤Ë²Ã¤¨¡¢¤µ¤é¤Ë trusty ¤ËÂФ·¤Æ¤Ï¡¢¤¹¤Ù¤Æ¤Î uid squashing ¤â̵¸ú¤Ë¤·¤Æ¤¤¤ë¡£ 2 ¹ÔÌÜ¤È 3 ¹ÔÌܤϡ¢¥Û¥¹¥È̾¤Ø¤Î¥ï¥¤¥ë¥É¥«¡¼¥É¤ÎÍøÍѤȡ¢¥Í¥Ã¥È¥°¥ë¡¼¥× (@trusted' ¤Î¥¨¥ó¥È¥ê) ¤ÎÎã¤Ç¤¢¤ë¡£ 4 ¹ÔÌܤϡ¢¾å¤Ç½Ò¤Ù¤¿ PC/NFS ¥¯¥é¥¤¥¢¥ó¥ÈÍÑ¥¨¥ó¥È¥ê¤ÎÎã¤Ç¤¢¤ë¡£ 5 ¹ÔÌܤϡ¢¸ø³« FTP ¥Ç¥£¥ì¥¯¥È¥ê¤òÀ¤³¦Ãæ¤ÎÁ´¤Æ¤Î¥Û¥¹¥È¤Ë¥¨¥¯¥¹¥Ý¡¼¥È¤·¤Æ¤¤¤ë¡£ ¤¹¤Ù¤Æ¤Î¥ê¥¯¥¨¥¹¥È¤Ïnobody ¥¢¥«¥¦¥ó¥È¤Ç¼Â¹Ô¤µ¤ì¤ë¡£ ¤Þ¤¿¤³¤Î¥¨¥ó¥È¥êÃæ¤Î insecure ¥ª¥×¥·¥ç¥ó¤Ë¤è¤Ã¤Æ¡¢ NFS ÍÑ port ¤ò»È¤ï¤Ê¤¤¤è¤¦¤Ë¼ÂÁõ¤µ¤ì¤¿ NFS ¥¯¥é¥¤¥¢¥ó¥È¤«¤é¤Î¥¢¥¯¥»¥¹¤âµö²Ä¤·¤Æ¤¤¤ë¡£ ºÇ¸å¤Î¹Ô¤Ç¤Ï¡¢ private ¥Ç¥£¥ì¥¯¥È¥ê¤Ø¤Î¥¢¥¯¥»¥¹¤ò¤¹¤Ù¤Æ¤Î ¥¯¥é¥¤¥¢¥ó¥È¤ËÂФ·¤ÆµñÈݤ¹¤ë¤è¤¦¤Ë¤·¤Æ¤¤¤ë¡£  

·Ù¹ð

¥Õ¥¡¥¤¥ë

ÊÖ¤êÃÍ

´ØÏ¢¹àÌÜ

Index

̾Á°

½ñ¼°

ÀâÌÀ

¥Þ¥·¥ó̾¤Î¥Õ¥©¡¼¥Þ¥Ã¥È

°ìÈÌŪ¤Ê¥ª¥×¥·¥ç¥ó

¥æ¡¼¥¶ ID ¤Î¥Þ¥Ã¥Ô¥ó¥°

Îã

·Ù¹ð

¥Õ¥¡¥¤¥ë

ÊÖ¤êÃÍ

´ØÏ¢¹àÌÜ