Using options command options to maintain filer security

What the options to the options command do

The following options to the options command help maintain filer security:

• The telnet.hosts option restricts telnet access to a limited number of hosts. Use this option to specify a comma-separated list of up to five hosts that can log in to the filer using telnet. Alternatively, you can disable telnet for all hosts by specifying a hyphen (-). By default, the option argument consists of an asterisk (*), which means all hosts have telnet access.

  A record of all telnet and console logins is maintained in the /etc/messages file on the root volume.

• The mount_rootonly option restricts the mount privilege to root using privileged ports (ports 1 through 1,024). By default, the option is enabled. This option accepts the arguments off and on to disable and enable it. This option is applicable only if your filer runs NFS.

  ---

  Note: Some PC clients and some older implementations of NFS on UNIX workstations use non-privileged ports to send requests. If you have these clients at your site, disable the mount_rootonly option or upgrade the client software.

  ---

• The wafl.root_only_chown option enables only root to change the owner of a file. When the option is disabled, the owner of a file can change its ownership without being root. By default, this option is enabled. Use the arguments off and on to disable and enable the option.

  When a non-root user changes the owner of a file, the set-user-id and set-group-id bits are cleared. If a non-root user tries to change the owner of a file but the change causes the file's recipient to exceed his or her quota, the attempt fails. This option is applicable only if your filer runs NFS.

Copyright © 1999, Network Appliance, Inc. All rights reserved.

Part No. 210-02334
File: routin26.htm
Last updated: 02/24/99 12:15:49