Linux Certif

Toute la documentation sur la certification Linux LPI

exports

̾Á°

exports - (¥«¡¼¥Í¥ë¥Ù¡¼¥¹¤Î NFS ¤Ç) ¥¨¥¯¥¹¥Ý¡¼¥È (export) ¤µ¤ì¤ë NFS ¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à

½ñ¼°

/etc/exports

ÀâÌÀ

/etc/exports ¥Õ¥¡¥¤¥ë¤Ï¡¢ NFS ¤Î¥¯¥é¥¤¥¢¥ó¥È¤Ë¤É¤Î¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤ò¥¨¥¯¥¹¥Ý¡¼¥È (export) ¤·¤Æ¤è¤¤¤«¡¢ ¤È¤¤¤¦¥¢¥¯¥»¥¹¥³¥ó¥È¥í¡¼¥ë¥ê¥¹¥È¤òÍ¿¤¨¤ë¡£ ¤³¤ì¤Ï exportfs(8) ¤Ë¤è¤Ã¤Æ»ÈÍѤµ¤ì¡¢NFS ¥Þ¥¦¥ó¥È¥Ç¡¼¥â¥ó mountd(8) ¤È¡¢¥«¡¼¥Í¥ë¥Ù¡¼¥¹¤Î NFS ¥Õ¥¡¥¤¥ë¥µ¡¼¥Ð¥Ç¡¼¥â¥ó nfsd(8) ¤È¤Ë¾ðÊó¤òÍ¿¤¨¤ë¡£

¤³¤Î¥Õ¥¡¥¤¥ë¤Î½ñ¼°¤Ï SunOS ¤Î exports ¥Õ¥¡¥¤¥ë¤È»÷¤Æ¤¤¤ë¡£ ¤½¤ì¤¾¤ì¤Î¹Ô¤Ë¤Ï¡¢¥¨¥¯¥¹¥Ý¡¼¥È¥Ý¥¤¥ó¥È¤È¡¢ ¤½¤Î¥Ý¥¤¥ó¥È¤Ë¤¢¤ë¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤ò¥Þ¥¦¥ó¥È¤Ç¤­¤ë¥¯¥é¥¤¥¢¥ó¥È¤ò ¥¹¥Ú¡¼¥¹¤Ç¶èÀڤäƻØÄꤷ¤¿¥ê¥¹¥È¤¬½ñ¤«¤ì¤Æ¤¤¤ë¡£ ¥ê¥¹¥È¤µ¤ì¤¿¥¯¥é¥¤¥¢¥ó¥È¤Îľ¸å¤Ë¤Ï¡¢ ¤½¤Î¥¯¥é¥¤¥¢¥ó¥È¸þ¤±¤Î¥¨¥¯¥¹¥Ý¡¼¥È¥ª¥×¥·¥ç¥ó¤ò¥³¥ó¥Þ¤Ç¶èÀڤäƥꥹ¥È»ØÄꤷ¡¢ ¥ê¥¹¥ÈÁ´ÂΤò³ç¸Ì¤Ç³ç¤Ã¤ÆÃÖ¤¯¤³¤È¤â¤Ç¤­¤ë¡£ ¥¯¥é¥¤¥¢¥ó¥È̾¤È¤³¤Î¥ª¥×¥·¥ç¥ó¥ê¥¹¥È¤È¤Î´Ö¤Ë¤Ï¥¹¥Ú¡¼¥¹¤òÆþ¤ì¤Æ¤Ï¤¤¤±¤Ê¤¤¡£

¶õ¹Ô¤Ï̵»ë¤µ¤ì¡¢# °Ê¹ß¹ÔËö¤Þ¤Ç¤Ï¥³¥á¥ó¥È¤È¤ß¤Ê¤µ¤ì¤ë¡£ ¹ÔËö¤Ë¥Ð¥Ã¥¯¥¹¥é¥Ã¥·¥å¤ò¤ª¤±¤Ð¡¢¥¨¥ó¥È¥ê¤Ï¼¡¤Î¹Ô¤Ë·Ñ³¤Ç¤­¤ë¡£ ¥¨¥¯¥¹¥Ý¡¼¥È̾¤Ë¶õÇò¤¬´Þ¤Þ¤ì¤ë¾ì¹ç¤Ï¡¢¥À¥Ö¥ë¥¯¥©¡¼¥È¤Ç³ç¤ë¡£ ¥¨¥¯¥¹¥Ý¡¼¥È¥Ñ¥¹Ì¾¤Ë¤Ï¡¢ ¶õÇò¤ä¤½¤Î¾Ä̾ï¤Ï»È¤ï¤ì¤Ê¤¤Ê¸»ú¤ò»ØÄꤹ¤ë¤³¤È¤â¤Ç¤­¤ë¡£ ¤³¤Î¤è¤¦¤Êʸ»ú¤ò»È¤¦¾ì¹ç¤Ï¡¢¥Ð¥Ã¥¯¥¹¥é¥Ã¥·¥å¤Î¸å¤Ë 3 ·å¤Î 8 ¿Ê¿ô¤Çʸ»ú¥³¡¼¥É¤ò»ØÄꤹ¤ë¡£

¥Þ¥·¥ó̾¤Î¥Õ¥©¡¼¥Þ¥Ã¥È

NFS ¥¯¥é¥¤¥¢¥ó¥È¤Ï¤¤¤í¤¤¤í¤ÊÊýË¡¤Ç»ØÄê¤Ç¤­¤ë¡£

single host

¤³¤ì¤Ï¤â¤Ã¤È¤âÉáÄ̤Υե©¡¼¥Þ¥Ã¥È¤Ç¤¢¤ë¡£¥Û¥¹¥È¤Î»ØÄê¤Ë¤Ï¡¢ ¥ì¥¾¥ë¥Ð¤¬Ç§¼±¤Ç¤­¤ë¾Êά·Á¡¢FQDN¡¢IP ¥¢¥É¥ì¥¹¤Î¤É¤ì¤òÍѤ¤¤Æ¤â¤è¤¤¡£

netgroups

NIS ¤Î¥Í¥Ã¥È¥°¥ë¡¼¥×¤ò @group ¤Î¤è¤¦¤ËÍ¿¤¨¤ë¤³¤È¤¬¤Ç¤­¤ë¡£¥Í¥Ã¥È¥°¥ë¡¼¥×¤Î³Æ¥á¥ó¥Ð¡¼¤Ï¡¢ ¥Û¥¹¥È¤ÎÉôʬ¤À¤±¤¬¼è¤ê½Ð¤µ¤ì¡¢¥á¥ó¥Ð¡¼¤ËÆþ¤ì¤é¤ì¤ë¡£ ¥Û¥¹¥È¤ÎÉôʬ¤¬¶õ¤À¤Ã¤¿¤ê¡¢Ã±°ì¤Î¥À¥Ã¥·¥å (-) ¤À¤Ã¤¿¤â¤Î¤Ï̵»ë¤µ¤ì¤ë¡£

¥ï¥¤¥ë¥É¥«¡¼¥É

¥Þ¥·¥ó̾¤Î»ØÄê¤Ë¤Ï¡¢¥ï¥¤¥ë¥É¥«¡¼¥Éʸ»ú¤È¤·¤Æ * ¤È ? ¤ò ÍѤ¤¤ë¤³¤È¤¬¤Ç¤­¤ë¡£¤³¤ì¤é¤ò»È¤¦¤È exports ¥Õ¥¡¥¤¥ë¤ò¥³¥ó¥Ñ¥¯¥È¤Ë¤Ç¤­¤ë¡£ Î㤨¤Ð *.cs.foo.edu ¤Ï¥É¥á¥¤¥ó cs.foo.edu ¤Ë¤¢¤ë¤¹¤Ù¤Æ¤Î ¥Û¥¹¥È¤Ë¥Þ¥Ã¥Á¤¹¤ë¡£ ¤³¤ì¤é¤Î¥ï¥¤¥ë¥É¥«¡¼¥Éʸ»ú¤Ï¥É¥á¥¤¥ó̾¤Î¥É¥Ã¥È (.) ¤Ë¤â¥Þ¥Ã¥Á¤¹¤ë¤Î¤Ç¡¢ ¤³¤³¤Ç»ØÄꤵ¤ì¤¿¥Ñ¥¿¡¼¥ó¤Ï cs.foo.edu ¤ÎǤ°Õ¤Î¥µ¥Ö¥É¥á¥¤¥óÆâ¤Î Á´¤Æ¤Î¥Û¥¹¥È¤Ë¥Þ¥Ã¥Á¤¹¤ë¡£

IP networks

¥Ç¥£¥ì¥¯¥È¥ê¤ò IP ¤Î (¥µ¥Ö) ¥Í¥Ã¥È¥ï¡¼¥¯¤Ë¸ºß¤¹¤ë¤¹¤Ù¤Æ¤Î¥Û¥¹¥È¤Ë Ʊ»þ¤Ë¥¨¥¯¥¹¥Ý¡¼¥È¤¹¤ë¤³¤È¤â¤Ç¤­¤ë¡£ ¤³¤ì¤Ë¤Ï IP ¥¢¥É¥ì¥¹¤È¥Í¥Ã¥È¥Þ¥¹¥¯¤Î¥Ú¥¢¤ò address/netmask ¤Î¤è¤¦¤Ë»ØÄꤹ¤ì¤Ð¤è¤¤¡£ ¤³¤³¤Ç netmask ¤Ï 10 ¿Ê¿ô¤ò¥É¥Ã¥È¤Ç¶èÀڤäƻØÄꤹ¤ë¤³¤È¤â¤Ç¤­¤ë¤·¡¢ Ϣ³¤¹¤ë¥Þ¥¹¥¯¤ÎŤµ¤Ç»ØÄꤹ¤ë¤³¤È¤â¤Ç¤­¤ë (Î㤨¤Ð¡¢¥Í¥Ã¥È¥ï¡¼¥¯¥Ù¡¼¥¹¥¢¥É¥ì¥¹¤Ë `/255.255.252.0' ¤òÄɲä·¤¿¾ì¹ç¤Ç¤â¡¢ `/22' ¤òÄɲä·¤¿¾ì¹ç¤Ç¤â¡¢¥Û¥¹¥ÈÉô¤¬ 10 ¥Ó¥Ã¥È¤ÎƱ¤¸¥µ¥Ö¥Í¥Ã¥È¥ï¡¼¥¯¤Ë¤Ê¤ë)¡£ ¥ï¥¤¥ë¥É¥«¡¼¥Éʸ»ú¤Ï¡¢Ä̾ï IP ¥¢¥É¥ì¥¹¤ËÂФ·¤Æ¤ÏÆ°ºî¤·¤Ê¤¤¡£ ¤¿¤À¤· DNS ¤ÎµÕ°ú¤­¤¬¼ºÇÔ¤¹¤ë¤È¡¢¤¿¤Þ¤¿¤ÞÆ°ºî¤·¤Æ¤·¤Þ¤¦¤³¤È¤â¤¢¤êÆÀ¤ë¡£

RPCSEC_GSS ¥»¥­¥å¥ê¥Æ¥£

¥¨¥¯¥¹¥Ý¡¼¥È¤Ø¤Î¥¢¥¯¥»¥¹¤ò rpcsec_gss ¥»¥­¥å¥ê¥Æ¥£¤ò»È¤Ã¤ÆÀ©¸Â¤¹¤ë¤Ë¤Ï¡¢ ¥¯¥é¥¤¥¢¥ó¥È¤È¤·¤ÆÆÃÊ̤Êʸ»úÎó "gss/krb5" ¤ò»È¤¦¤³¤È¡£ rpcsec_gss ¤È¥¯¥é¥¤¥¢¥ó¥È¤Î IP ¥¢¥É¥ì¥¹¤Ë¤è¤ë»ñ³Ê¤ò Ʊ»þ¤ËÍ׵᤹¤ë¤³¤È¤Ï¤Ç¤­¤Ê¤¤¡£

°ìÈÌŪ¤Ê¥ª¥×¥·¥ç¥ó

exportfs ¤Ï°Ê²¼¤Î¥¨¥¯¥¹¥Ý¡¼¥È¥ª¥×¥·¥ç¥ó¤ò¼õ¤±ÉÕ¤±¤ë¡£

secure

¤³¤Î¥ª¥×¥·¥ç¥ó¤ò»ØÄꤹ¤ë¤È¡¢IPPORT_RESERVED (1024) ¤è¤ê¾®¤µ¤Ê internet ¥Ý¡¼¥È¤«¤éȯ¤·¤¿¥ê¥¯¥¨¥¹¥È¤·¤«¼õ¤±¤Ä¤±¤Ê¤¤¡£ ¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¥Ç¥Õ¥©¥ë¥È¤ÇÍ­¸ú¤Ë¤Ê¤Ã¤Æ¤¤¤ë¡£ ̵¸ú¤Ë¤¹¤ë¤Ë¤Ï insecure ¤È»ØÄꤹ¤ë¡£

rw

¤³¤Î NFS ¥Ü¥ê¥å¡¼¥à¤ËÂФ·¤Æ¡¢½ñ¤­¹þ¤ß¤ÈÆɤ߽Ф·¥ê¥¯¥¨¥¹¥È¤ÎξÊý¤òµö²Ä¤¹¤ë¡£ ¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤òÊѹ¹¤¹¤ëÁ´¤Æ¤Î½ñ¤­¹þ¤ß¤òµñÈݤ¹¤ë (¤³¤ì¤Ï ro ¥ª¥×¥·¥ç¥ó¤ÇÌÀ¼¨¤·¤¿¾ì¹ç¤âƱ¤¸)¡£

async

¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï NFS ¥µ¡¼¥Ð¤ò NFS ¥×¥í¥È¥³¥ë¤Ë°ãÈ¿¤µ¤»¡¢ ¤¢¤ë¥ê¥¯¥¨¥¹¥È¤Ë¤è¤Ã¤Æ¤Ê¤µ¤ì¤¿Êѹ¹¤¬°ÂÄꤷ¤¿Êݸ¾ì½ê (Î㤨¤Ð¥Ç¥£¥¹¥¯¥É¥é¥¤¥Ö) ¤ËÅϤµ¤ì¤ëÁ°¤Ë¡¢ ¤½¤Î¥ê¥¯¥¨¥¹¥È¤Ë±þ¤¨¤ë¤è¤¦¤Ë¤¹¤ë¡£

¤³¤Î¥ª¥×¥·¥ç¥ó¤òÍѤ¤¤ë¤ÈÄ̾ï¤ÏÀ­Ç½¤¬¸þ¾å¤¹¤ë¤¬¡¢ ¥¯¥ê¡¼¥ó¤Ç¤Ê¤¤¥µ¡¼¥Ð¤ÎºÆµ¯Æ° (¤Ä¤Þ¤ê¥¯¥é¥Ã¥·¥å) ¤Ë¤è¤Ã¤Æ¥Ç¡¼¥¿¤¬¼º¤ï¤ì¤¿¤êÇ˲õ¤µ¤ì¤¦¤ë¤È¤¤¤¦Âå½þ¤òȼ¤¦¡£

nfs-utils ¤Î 1.0.0 ¤Þ¤Ç¤Ç¤Ï¡¢¤³¤Î¥ª¥×¥·¥ç¥ó¤¬¥Ç¥Õ¥©¥ë¥È¤Ç¤¢¤Ã¤¿¡£ ¤³¤Î¥ê¥ê¡¼¥¹°Ê¹ß¤Ï sync ¤¬¥Ç¥Õ¥©¥ë¥È¤È¤Ê¤ê¡¢ async ¤ÏɬÍפʾì¹ç¤ÏÌÀ¼¨Åª¤Ë»ØÄꤷ¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£ ¥·¥¹¥Æ¥à´ÉÍý¼Ô¤Ë¤³¤ÎÊѹ¹¤òÃΤ餻¤ë¤¿¤á¡¢ sync ¤È async ¤Î¤¤¤º¤ì¤â»ØÄꤵ¤ì¤Æ¤¤¤Ê¤¤¾ì¹ç¡¢`exportfs' ¤Ï·Ù¹ð¤òȯ¤¹¤ë¡£

no_wdelay

¤³¤Î¥ª¥×¥·¥ç¥ó¤ÏƱ»þ¤Ë async ¤¬ÀßÄꤵ¤ì¤Æ¤¤¤ë¤È¸ú²Ì¤ò»ý¤¿¤Ê¤¤¡£ NFS ¥µ¡¼¥Ð¤Ï¡¢½ñ¤­¹þ¤ßÍ×µá¤ò¼õ¤±¤¿¤È¤­¡¢ ´ØÏ¢¤·¤¿Ê̤νñ¤­¹þ¤ßÍ׵᤬¼Â¹ÔÃæ¤Ç¤¢¤ë (¤Þ¤¿¤Ï¶á¡¹ÅþÃ夹¤ë) ¤ÈͽÁÛ¤·¤¿¾ì¹ç¡¢ ¤½¤ÎÍ×µá¤Î¥Ç¥£¥¹¥¯¤Ø¤ÎÈ¿±Ç¤ò¾¯¤·Ã٤餻¤ë¡£ ¤³¤ì¤Ë¤è¤ê°ìÅÙ¤ÎÁàºî¤ÇÊ£¿ô¤Î½ñ¤­¹þ¤ßÍ׵᤬ ¥Ç¥£¥¹¥¯¤ËÈ¿±Ç¤µ¤ì¤ë¤Î¤Ç¡¢À­Ç½¤¬¸þ¾å¤¹¤ë¡£ NFS ¥µ¡¼¥Ð¤¬¼õ¤±¼è¤ë¥Ç¡¼¥¿¤Î½ñ¤­¹þ¤ßÍ׵᤬¡¢ ¼ç¤È¤·¤Æ´ØÏ¢À­¤Î¤Ê¤¤¾®¤µ¤Ê¤â¤Î¤Î¾ì¹ç¤Ë¤Ï¡¢ ¤³¤ÎÆ°ºî¤Ï¼ÂºÝ¤Ë¤ÏÀ­Ç½¤òÄã²¼¤µ¤»¤Æ¤·¤Þ¤¦¤Î¤Ç¡¢ no_wdelay ¤ò»ØÄꤷ¤Æ̵¸ú¤Ë¤Ç¤­¤ë¡£ ¥Ç¥Õ¥©¥ë¥È¤ÎÆ°ºî¤ò wdelay ¥ª¥×¥·¥ç¥ó¤ÇÌÀ¼¨Åª¤Ë»ØÄꤹ¤ë¤³¤È¤â¤Ç¤­¤ë¡£

nohide

¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï IRIX NFS ¤ÇÄ󶡤µ¤ì¤ëƱ̾¤Î¥ª¥×¥·¥ç¥ó¤ò¸µ¤Ë¤·¤Æ¤¤¤ë¡£ ¥µ¡¼¥Ð¤¬ 2 ¤Ä¤Î¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤ò¥¨¥¯¥¹¥Ý¡¼¥È¤·¡¢ ¤½¤Î¤¦¤Á¤Î 1 ¤Ä¤¬Â¾Êý¤Ë¥Þ¥¦¥ó¥È¤µ¤ì¤Æ¤¤¤ë¾ì¹ç¡¢ ¥¯¥é¥¤¥¢¥ó¥È¤¬Î¾¼Ô¤Ë¥¢¥¯¥»¥¹¤ò¹Ô¤¦¤Ë¤Ï¡¢ ξÊý¤Î¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤òÌÀ¼¨Åª¤Ë¥Þ¥¦¥ó¥È¤·¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£ ¿Æ¤ÎÊý¤ò¥Þ¥¦¥ó¥È¤·¤¿¤À¤±¤Ç¤Ï¡¢ ¤â¤¦°ìÊý¤Î¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤¬¥Þ¥¦¥ó¥È¤µ¤ì¤Æ¤¤¤ë¥Ç¥£¥ì¥¯¥È¥ê¤Ï¶õ¤Ë¸«¤¨¤ë¡£ ¤³¤Î¤è¤¦¤Ê¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤Ï "hidden" ¤È¤¤¤ï¤ì¤ë¡£

hidden ¤Ë¤·¤¿¤¯¤Ê¤¤¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤Ë nohide ¥ª¥×¥·¥ç¥ó¤òÀßÄꤹ¤ì¤Ð¡¢ ŬÀڤʸ¢¸Â¤Î¤¢¤ë¥¯¥é¥¤¥¢¥ó¥È¤ÏÊѹ¹¤òÃΤ餵¤ì¤ë¤³¤È¤Ê¤¯¡¢ ¿Æ¤«¤é»Ò¤Î¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤Ë°ÜÆ°¤Ç¤­¤ë¡£

¤·¤«¤· NFS ¥¯¥é¥¤¥¢¥ó¥È¤Î¤Ê¤«¤Ë¤Ï¡¢ ¤³¤Î¤è¤¦¤Ê¾õ¶· (Î㤨¤Ð¡¢¸«¤«¤±¾å 1 ¤Ä¤Î¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤Ç 2 ¤Ä¤Î¥Õ¥¡¥¤¥ë¤¬Æ±¤¸ inode ÈÖ¹æ¤ò»ý¤Ä¤è¤¦¤Ê¾õ¶·) ¤Ç¤Ï¤¦¤Þ¤¯Æ°ºî¤·¤Ê¤¤¤â¤Î¤â¤¢¤ë¡£

nohide ¥ª¥×¥·¥ç¥ó¤Ï¸½ºß¤Î¤È¤³¤í single host ¥¨¥¯¥¹¥Ý¡¼¥È¤Ç¤·¤«¸ú²Ì¤¬¤Ê¤¤¡£ ¤³¤Î¥ª¥×¥·¥ç¥ó¤ÎÆ°ºî¤Ï¡¢ netgroup, subnet, wildcard ¤Ê¤É¤Ë¤è¤ë¥¨¥¯¥¹¥Ý¡¼¥È¤Ç¤Ï¿®ÍêÀ­¤¬¤Ê¤¤¡£

¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¾õ¶·¤Ë¤è¤Ã¤Æ¤Ï¤È¤Æ¤âÊØÍø¤Ç¤¢¤ë¤¬¡¢¤è¤¯Ãí°Õ¤·¤Æ¡¢ ¤«¤Ä¥¯¥é¥¤¥¢¥ó¥È¥·¥¹¥Æ¥à¤¬¤½¤Î¾õ¶·²¼¤Ç¸ú²ÌŪ¤ËÆ°ºî¤¹¤ë¤³¤È¤ò³Îǧ¤·¤¿¸å¤Ç »È¤¦¤Ù¤­¤Ç¤¢¤ë¡£

¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï hide ¤ÇÌÀ¼¨Åª¤Ë̵¸ú¤Ë¤Ç¤­¤ë¡£

no_subtree_check

¤³¤Î¥ª¥×¥·¥ç¥ó¤Î¥µ¥Ö¥Ä¥ê¡¼¤Î¥Á¥§¥Ã¥¯¤ò̵¸ú¤Ë¤¹¤ë¡£ ¤³¤ì¤Ë¤Ï´Êñ¤Ê¥»¥­¥å¥ê¥Æ¥£¤Î°ÕÌ£¤â¤¢¤ë¤¬¡¢ ´Ä¶­¤Ë¤è¤Ã¤Æ¤Ï¿®ÍêÀ­¤ò¸þ¾å¤µ¤»¤ë¤³¤È¤â¤Ç¤­¤ë¡£

¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤Î¥µ¥Ö¥Ç¥£¥ì¥¯¥È¥ê¤¬¥¨¥¯¥¹¥Ý¡¼¥È¤µ¤ì¤Æ¤¤¤ë¤¬¡¢ ¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥àÁ´ÂΤ¬¥¨¥¯¥¹¥Ý¡¼¥È¤µ¤ì¤Æ¤¤¤Ê¤¤¾ì¹ç¡¢ NFS ¥ê¥¯¥¨¥¹¥È¤¬¤¯¤ë¤È¡¢¥µ¡¼¥Ð¤ÏÂбþ¤¹¤ë¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤Ë ¥¢¥¯¥»¥¹¤µ¤ì¤¿¥Õ¥¡¥¤¥ë¤¬¤¢¤ë¤«¤ò¥Á¥§¥Ã¥¯¤¹¤ë¤À¤±¤Ç¤Ê¤¯ (¤³¤ì¤Ï´Êñ)¡¢ ¥¨¥¯¥¹¥Ý¡¼¥È¤µ¤ì¤¿¥Ä¥ê¡¼¤Î¤Ê¤«¤Ë¤¢¤ë¤«¤â¥Á¥§¥Ã¥¯¤·¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤ (¤³¤ì¤ÏÆñ¤·¤¤)¡£ ¤³¤Î¥Á¥§¥Ã¥¯¤Ï subtree_check ¤È¤è¤Ð¤ì¤ë¡£

¤³¤Î¥Á¥§¥Ã¥¯¤ò¹Ô¤¦¤Ë¤Ï¡¢¥µ¡¼¥Ð¤Ï¥¯¥é¥¤¥¢¥ó¥È¤ËÅϤ¹ ¡Ö¥Õ¥¡¥¤¥ë¥Ï¥ó¥É¥ë¡×¤Ë¡¢¥Õ¥¡¥¤¥ë¤Î¾ì½ê¤Ë´Ø¤¹¤ë¾ðÊó¤òÆþ¤ì¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£ ¤³¤¦¤¹¤ë¤È¡¢¥¯¥é¥¤¥¢¥ó¥È¤¬¥Õ¥¡¥¤¥ë¤ò¥ª¡¼¥×¥ó¤·¤Æ¤¤¤ë´Ö¤Ë¡¢ ¥¢¥¯¥»¥¹¤·¤Æ¤¤¤ë¥Õ¥¡¥¤¥ë¤Î̾Á°¤¬Êѹ¹¤µ¤ì¤ë¤ÈÌäÂ꤬µ¯¤³¤ë (¤¿¤À¤·Â¿¤¯¤Î´Êñ¤Ê¥±¡¼¥¹¤Ç¤ÏÆ°ºî¤¹¤ë)¡£

¥µ¥Ö¥Ä¥ê¡¼¤Î¥Á¥§¥Ã¥¯¤Ï¡¢ ¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤¬ no_root_squash (²¼µ­»²¾È) ¤Ç¥¨¥¯¥¹¥Ý¡¼¥È¤µ¤ì¤Æ¤¤¤Æ¡¢ ¥Õ¥¡¥¤¥ë¼«¿È¤Ë¤Ï¤è¤ê°ìÈÌŪ¤Ê¥¢¥¯¥»¥¹¸¢¤¬¤¢¤ë¾ì¹ç¤Ë¡¢ root ¤·¤«¥¢¥¯¥»¥¹¤Ç¤­¤Ê¤¤¥Ç¥£¥ì¥¯¥È¥êÆâ¤Î¥Õ¥¡¥¤¥ë¤¬ root ¤Ë¤è¤Ã¤Æ¤Î¤ß¥¢¥¯¥»¥¹¤µ¤ì¤Æ¤¤¤ë¤«¤ò³Îǧ¤¹¤ë¤Î¤Ë¤â»È¤¨¤ë¡£

°ìÈÌŪ¤Ê»Ø¿Ë¤È¤·¤Æ¡¢¥Û¡¼¥à¥Ç¥£¥ì¥¯¥È¥ê¤Ï ¥µ¥Ö¥Ä¥ê¡¼¤Î¥Á¥§¥Ã¥¯¤ò̵¸ú¤Ë¤·¤Æ¥¨¥¯¥¹¥Ý¡¼¥È¤¹¤Ù¤­¤Ç¤¢¤ë (Ä̾ï³Æ¥æ¡¼¥¶¤Î¿Æ¥Ç¥£¥ì¥¯¥È¥ê¤Î¥ì¥Ù¥ë¤Ç¥¨¥¯¥¹¥Ý¡¼¥È¤µ¤ì¡¢ ¤«¤Ä¥Õ¥¡¥¤¥ë̾¤ÎÊѹ¹¤¬Â¿¤¤¤¿¤á)¡£ ÂçÄñ¤ÏÆɤ߹þ¤ß¤Î¤ß¤Ç¡¢¤Û¤È¤ó¤É¥Õ¥¡¥¤¥ë̾¤ÎÊѹ¹¤¬¹Ô¤ï¤ì¤Ê¤¤ ¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à (¤¿¤È¤¨¤Ð /usr ¤ä /var) ¤Ç¡¢ ¤½¤ì¤é¤Î¥µ¥Ö¥Ç¥£¥ì¥¯¥È¥ê¤¬¥¨¥¯¥¹¥Ý¡¼¥È¤µ¤ì¤ë¤è¤¦¤Ê¾ì¹ç¤Ë¤Ï¡¢ ¥µ¥Ö¥Ä¥ê¡¼¤Î¥Á¥§¥Ã¥¯¤òÍ­¸ú¤Ë¤·¤Æ¥¨¥¯¥¹¥Ý¡¼¥È¤·¤¿Êý¤¬¤è¤¤¤«¤â¤·¤ì¤Ê¤¤¡£

¥µ¥Ö¥Ä¥ê¡¼¤Î¥Á¥§¥Ã¥¯¤ò¹Ô¤¦¥Ç¥Õ¥©¥ë¥È¤ÎÆ°ºî¤Ï¡¢ subtree_check ¤ÇÌÀ¼¨Åª¤Ë»ØÄꤹ¤ë¤³¤È¤â¤Ç¤­¤ë¡£

insecure_locks

no_auth_nlm

¤³¤Î¥ª¥×¥·¥ç¥ó (2 ¤Ä¤Î¥ª¥×¥·¥ç¥ó̾¤ÏƱ¤¸°ÕÌ£) ¤ò»ØÄꤹ¤ë¤È¡¢ NFS ¤Ï¥í¥Ã¥¯Í×µá (NLM ¥×¥í¥È¥³¥ë¤ò»È¤Ã¤¿Í×µá) ¤ÎºÝ¤Ëǧ¾Ú¤òɬÍפȤ·¤Ê¤¯¤Ê¤ë¡£ Ä̾ï NFS ¥µ¡¼¥Ð¤Ï¡¢¥Õ¥¡¥¤¥ë¤ÎÆɤ߼è¤ê¥¢¥¯¥»¥¹¸¢¸Â¤ò»ý¤Ä¥æ¡¼¥¶¤ËÂФ·¡¢ ¿®ÍѾÚÌÀ (credential) ¤òÊÝ»ý¤¹¤ë¤¿¤á¤Ë¡¢¥í¥Ã¥¯Í×µá¤òɬÍפȤ¹¤ë¡£ ¤³¤Î¥Õ¥é¥°¤ò»ØÄꤹ¤ë¤È¡¢¥¢¥¯¥»¥¹¥Á¥§¥Ã¥¯¤¬¹Ô¤ï¤ì¤Ê¤¤¡£

½é´ü¤Î NFS ¥¯¥é¥¤¥¢¥ó¥È¤Î¼ÂÁõ¤Ç¤Ï¥í¥Ã¥¯Í×µá¤ÎºÝ¤Ë¿®ÍѾÚÌÀ¤òÁ÷¤é¤Ê¤«¤Ã¤¿¤¬¡¢ ¸½ºß¤Ç¤â¤³¤Î¤è¤¦¤ÊÀΤμÂÁõ¤ò¸µ¤Ë¤·¤¿Â¿¤¯¤Î NFS ¥¯¥é¥¤¥¢¥ó¥È¤¬Â¸ºß¤¹¤ë¡£ Á´¤Æ¤Î¿Í¤¬Æɤ߹þ¤ß²Äǽ¤Ê¥Õ¥¡¥¤¥ë¤Î¤ß¤ò¥í¥Ã¥¯¤·¤¿¤¤¾ì¹ç¤Ï¡¢ ¤³¤Î¥Õ¥é¥°¤ò»È¤¦¤³¤È¡£

NLM Í×µá¤ÎºÝ¤Ëǧ¾Ú¤òµá¤á¤ë¥Ç¥Õ¥©¥ë¥È¤ÎÆ°ºî¤Ï¡¢ Ʊ¤¸°ÕÌ£¤ò¤â¤Ä auth_nlm ¤Þ¤¿¤Ï secure_locks ¤Î¤É¤Á¤é¤« (°ÕÌ£¤ÏÁ´¤¯Æ±¤¸) ¤ÇÌÀ¼¨Åª¤Ë»ØÄê¤Ç¤­¤ë¡£

mountpoint=path

mp

¤³¤Î¥ª¥×¥·¥ç¥ó¤ò»È¤¦¤È¡¢¥Þ¥¦¥ó¥È¤ËÀ®¸ù¤·¤¿¾ì¹ç¤Ë¤Î¤ß¡¢ ¤½¤Î¥Ç¥£¥ì¥¯¥È¥ê¤ò¥¨¥¯¥¹¥Ý¡¼¥È¤Ç¤­¤ë¡£ ¥Ñ¥¹¤¬»ØÄꤵ¤ì¤Ê¤¤¾ì¹ç (¤¿¤È¤¨¤Ð mountpoint ¤Þ¤¿¤Ï mp ¤Î¾ì¹ç)¡¢¥¨¥¯¥¹¥Ý¡¼¥È¥Ý¥¤¥ó¥È¤Ï¥Þ¥¦¥ó¥È¥Ý¥¤¥ó¥È¤Ç¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£ ¤½¤¦¤Ç¤Ê¤±¤ì¤Ð¡¢¥¨¥¯¥¹¥Ý¡¼¥È¥Ý¥¤¥ó¥È¤Ï¥¨¥¯¥¹¥Ý¡¼¥È¤µ¤ì¤Ê¤¤¡£ ¤³¤ì¤Ë¤è¤ê¡¢¥Þ¥¦¥ó¥È¥Ý¥¤¥ó¥È°Ê²¼¤Î¥Ç¥£¥ì¥¯¥È¥ê¤¬¡¢ »ö¸Î¤Ë¤è¤Ã¤Æ¥¨¥¯¥¹¥Ý¡¼¥È¤µ¤ì¤Æ¤·¤Þ¤ï¤Ê¤¤¤è¤¦¤Ë¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£ ¤³¤³¤Ç¤¤¤¦»ö¸Î¤È¤Ï¡¢Î㤨¤Ð¥Ç¥£¥¹¥¯¥¨¥é¡¼¤Ë¤è¤Ã¤Æ ¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤¬¥Þ¥¦¥ó¥È¤Ë¼ºÇÔ¤¹¤ë¤è¤¦¤Ê¾ì¹ç¤Ç¤¢¤ë¡£

¥Ñ¥¹¤¬»ØÄꤵ¤ì¤ë¾ì¹ç (¤¿¤È¤¨¤Ð mountpoint=/path ¤Þ¤¿¤Ï mp=/path ¤Î¾ì¹ç)¡¢¥Þ¥¦¥ó¥È¤µ¤ì¤ë¥Ñ¥¹¤Ï¡¢ ¥¨¥¯¥¹¥Ý¡¼¥È¤µ¤ì¤ë¥¨¥¯¥¹¥Ý¡¼¥È¥Ý¥¤¥ó¥È¤ËÂбþ¤¹¤ë ¥Þ¥¦¥ó¥È¥Ý¥¤¥ó¥È¤Ç¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£

fsid=num

¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¡¢ÄÌ¿®¤Ç»ÈÍѤµ¤ì¤ë¥Õ¥¡¥¤¥ë¥Ï¥ó¥É¥ë¤È¥Õ¥¡¥¤¥ë°À­¤Î ¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¼±ÊÌÉô¤È¤·¤Æ¡¢ ¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤¬¥Þ¥¦¥ó¥È¤µ¤ì¤Æ¤¤¤ë¥Ö¥í¥Ã¥¯¥Ç¥Ð¥¤¥¹¤Î ¥á¥¸¥ã¡¼ÈÖ¹æ¤È¥Þ¥¤¥Ê¡¼Èֹ椫¤éƳ¤­½Ð¤µ¤ì¤¿¿ô¤Ç¤Ï¤Ê¤¯¡¢ num ¤ò»È¤¦¡£ Ǥ°Õ¤Î 32 ¥Ó¥Ã¥È¤Î¿ôÃͤ¬»È¤¨¤ë¤¬¡¢ ¥¨¥¯¥¹¥Ý¡¼¥È¤µ¤ì¤ë¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à´Ö¤Ç°ì°Õ (unique) ¤Ç¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¡£

¤³¤ì¤Ï NFS ¤Î¥Õ¥§¥¤¥ë¥ª¡¼¥Ð¡¼ (failover, ÂåÂØ°ú¤­·Ñ¤®) ¤ÇÌòΩ¤Ä¡£ ¥Õ¥§¥¤¥ë¥ª¡¼¥Ð¡¼¤Î¥Ú¥¢¤È¤Ê¤ëξÊý¤Î¥µ¡¼¥Ð¡¼¤¬¡¢ ¶¦Í­¤µ¤ì¤ë¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤ËÂФ·¤Æ Ʊ¤¸ NFS ¥Õ¥¡¥¤¥ë¥Ï¥ó¥É¥ë¤ò»È¤¦¤³¤È¤¬Êݾڤµ¤ì¤ë¤Î¤Ç¡¢ ¥Õ¥§¥¤¥ë¥ª¡¼¥Ð¡¼¸å¤Ë¥Õ¥¡¥¤¥ë¥Ï¥ó¥É¥ë¤¬¼º¸ú¤¹¤ë¤Î¤òÈò¤±¤ë¤³¤È¤¬¤Ç¤­¤ë¡£

Linux ¤Î¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤ÎÃæ¤Ë¤Ï¡¢ ¥Ö¥í¥Ã¥¯¥Ç¥Ð¥¤¥¹¤Ë¥Þ¥¦¥ó¥È¤µ¤ì¤Æ¤¤¤Ê¤¤¤â¤Î¤â¤¢¤ë¡£ ¤³¤ì¤é¤Î¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤ò NFS ¤Ç¥¨¥¯¥¹¥Ý¡¼¥È¤¹¤ë¤Ë¤Ï¡¢ fsid ¥ª¥×¥·¥ç¥ó¤ò»È¤¦É¬Íפ¬¤¢¤ë (¤¿¤À¤·¡¢¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¤Þ¤À½¼Ê¬¤Ç¤Ï¤Ê¤¤)¡£

ÃÍ 0 ¤Ï NFSv4 ¤Ç»È¤¦¾ì¹ç¤Ë¤ÏÆÃÊ̤ʰÕÌ£¤ò»ý¤Ä¡£ NFSv4 ¤Ë¤Ï¥¨¥¯¥¹¥Ý¡¼¥È¤µ¤ì¤ë¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥àÁ´ÂΤΥ롼¥È¤È¤¤¤¦³µÇ°¤¬¤¢¤ë¡£ fsid=0 ¤Ç¥¨¥¯¥¹¥Ý¡¼¥È¤µ¤ì¤¿¥¨¥¯¥¹¥Ý¡¼¥È¥Ý¥¤¥ó¥È¤Ï¡¢ ¤³¤Î¥ë¡¼¥È¤È¤·¤Æ»ÈÍѤµ¤ì¤ë¡£

¥æ¡¼¥¶ ID ¤Î¥Þ¥Ã¥Ô¥ó¥°

¥µ¡¼¥Ð¥Þ¥·¥ó¾å¤Î¥Õ¥¡¥¤¥ë¤ËÂФ¹¤ë nfsd ¤Ë¤è¤ë¥¢¥¯¥»¥¹¥³¥ó¥È¥í¡¼¥ë¤Ï¡¢ ¤½¤ì¤¾¤ì¤Î NFS RPC request ¤ÎºÝ¤ËÍ¿¤¨¤é¤ì¤ë uid ¤È gid ¤Ë´ð¤Å¤¤¤Æ¤¤¤ë¡£ ¥æ¡¼¥¶¤ÏÄ̾ ¥µ¡¼¥Ð¾å¤Ë¤¢¤ë¼«Ê¬¤Î¥Õ¥¡¥¤¥ë¤Ë¤Ï¡¢¤½¤ì¤¬ÉáÄ̤Υե¡¥¤¥ë¥·¥¹¥Æ¥à¾å¤Ë ¤¢¤ë¤Î¤ÈƱÍͤ˥¢¥¯¥»¥¹²Äǽ¤Ç¤¢¤ë¤³¤È¤ò´üÂÔ¤·¤Æ¤¤¤ë¡£ ¤³¤ì¤Ë¤Ï¥¯¥é¥¤¥¢¥ó¥È¤È¥µ¡¼¥Ð¾å¤ÇÍѤ¤¤é¤ì¤ë uid ¤È gid ¤¬¤½¤ì¤¾¤ì Ʊ¤¸¤Ç¤¢¤ëɬÍפ¬¤¢¤ë¤¬¡¢ ¤³¤ì¤Ï¾ï¤Ë¿¿¤Ç¤¢¤ë¤È¤Ï¸Â¤é¤º¡¢Ë¾¤Þ¤·¤¤¤È¤â¸Â¤é¤Ê¤¤¡£

¥¯¥é¥¤¥¢¥ó¥È¥Þ¥·¥ó¤Î root ¤¬ NFS ¥µ¡¼¥Ð¤Î¥Õ¥¡¥¤¥ë¤Ë¥¢¥¯¥»¥¹¤¹¤ë¤È¤­¡¢ ¥µ¡¼¥Ð¤Î root ¤È¤·¤Æ°·¤ï¤ì¤Æ¤·¤Þ¤¦¤Î¤Ï¡¢¤Û¤È¤ó¤É¤Î¾ì¹ç¤Ï˾¤Þ¤·¤¯¤Ê¤¤¡£ ¤³¤Î¤¿¤á uid 0 ¤ÏÉáÄ̤ÏÊ̤Πid (anonymous ¤ä nobody uid) ¤Ë¥Þ¥Ã¥Ô¥ó¥°¤µ¤ì¤ë¡£ ¤³¤ÎÆ°ºî¤Ï `root squashing' ¤È¸Æ¤Ð¤ì¤ë¤¬¡¢¤³¤ì¤¬¥Ç¥Õ¥©¥ë¥È¤Ç¤¢¤ë¡£ no_root_squash ¤ò»È¤¨¤Ð¥ª¥Õ¤Ë¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¡£

¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï¡¢ exportfs ¤Ï squash ¥¢¥¯¥»¥¹¤Ë -2 (¤Ä¤Þ¤ê 65534) ¤È¤¤¤¦ uid ¤È gid ¤òÍѤ¤¤ë¡£ ¤³¤ì¤é¤Î¿ôÃÍ¤Ï anonuid ¤È anongid ¥ª¥×¥·¥ç¥ó¤Ë¤è¤Ã¤ÆÊѹ¹¤Ç¤­¤ë¡£ ºÇ¸å¤Ë¡¢ all_squash ¥ª¥×¥·¥ç¥ó¤ò»ØÄꤹ¤ì¤Ð¡¢ Á´¤Æ¤Î user request ¤ò anonymous uid ¤Ë³ä¤êÅö¤Æ¤ë¤³¤È¤â¤Ç¤­¤ë¡£

°Ê²¼¤Ë¥Þ¥Ã¥Ô¥ó¥°¥ª¥×¥·¥ç¥ó¤Î´°Á´¤Ê¥ê¥¹¥È¤ò¤¢¤²¤ë:

root_squash

uid/gid ¤¬ 0 ¤Î¥ê¥¯¥¨¥¹¥È¤ò annonymous uid/gid ¤Ë¥Þ¥Ã¥Ô¥ó¥°¤¹¤ë¡£ ¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¡¢ root °Ê³°¤Î uid ¤Ë¤ÏŬÍѤµ¤ì¤Ê¤¤¡£Â¾¤Ë¤â Ãí°Õ¤¹¤Ù¤­ uid ¤Ï¸ºß¤¹¤ë (Î㤨¤Ð bin ¤Ê¤É) ¤Î¤Ç¡¢Ãí°Õ¤¹¤ëɬÍפ¬¤¢¤ë¡£

no_root_squash

root squashing ¤ò̵¸ú¤Ë¤¹¤ë¡£ ¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¼ç¤Ë¥Ç¥£¥¹¥¯¥ì¥¹¥¯¥é¥¤¥¢¥ó¥È¤Ë¤È¤Ã¤ÆÊØÍø¤Ç¤¢¤ë¡£

all_squash

Á´¤Æ¤Î uid ¤Ègid ¤ò anonymous ¤Ë¥Þ¥Ã¥Ô¥ó¥°¤¹¤ë¡£ ¤³¤ì¤Ï NFS ¥¨¥¯¥¹¥Ý¡¼¥È¤µ¤ì¤¿¸ø³« FTP ¥Ç¥£¥ì¥¯¥È¥ê¤ä¡¢ news ¤Î¥¹¥×¡¼¥ë¥Ç¥£¥ì¥¯¥È¥êÅù¤ËÊØÍø¤Ç¤¢¤ë¡£ ¤³¤ì¤ÈµÕ¤Î¥ª¥×¥·¥ç¥ó¤Ï no_all_squash ¤Ç¤¢¤ê¡¢¤³¤Á¤é¤¬¥Ç¥Õ¥©¥ë¥È¤Ë¤Ê¤Ã¤Æ¤¤¤ë¡£

anonuid ¤ª¤è¤Ó anongid

¤³¤ì¤é¤Î¥ª¥×¥·¥ç¥ó¤Ï anonymous ¥¢¥«¥¦¥ó¥È¤Î uid ¤È gid ¤òÌÀ¼¨Åª¤Ë¥»¥Ã¥È ¤¹¤ë¡£¤³¤ì¤Ï¡¢Á´¤Æ¤Î¥ê¥¯¥¨¥¹¥È¤¬°ì¿Í¤Î¥æ¡¼¥¶¤«¤é¤Ë¤Ê¤ë¤è¤¦¤Ê PC/NFS clients ¤Ë¤È¤Ã¤Æ¼ç¤ËÍ­¸ú¤Ç¤¢¤ë¡£ Î㤨¤Ð¡¢ °Ê²¼¤Î¡ÖÎã¡×¤Î¥»¥¯¥·¥ç¥ó¤Ç¤Î /home/joe ¤Ê¤ë¥¨¥¯¥¹¥Ý¡¼¥È¥¨¥ó¥È¥ê¤ò¸«¤Æ¤Û¤·¤¤¡£ ¤³¤ÎÎã¤Ç¤Ï¡¢(joe ¤«¤é¤Î¤â¤Î¤Ç¤¢¤ë¤È»×¤ï¤ì¤ë) Á´¤Æ¤Î¥ê¥¯¥¨¥¹¥È¤¬ uid 150 ¤Ë ¥Þ¥Ã¥Ô¥ó¥°¤µ¤ì¤ë¡£

Îã

# sample /etc/exports file

/               master(rw) trusty(rw,no_root_squash)

/projects       proj*.local.domain(rw)

/usr            *.local.domain(ro) @trusted(rw)

/home/joe       pc001(rw,all_squash,anonuid=150,anongid=100)

/pub            (ro,insecure,all_squash)

1 ¹ÔÌܤϡ¢ master ¤È trusty ¤ËÂФ·¤Æ¤¹¤Ù¤Æ¤Î¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤Î ¥Þ¥¦¥ó¥Èµö²Ä¤ò½Ð¤·¤Æ¤¤¤ë¡£ ½ñ¤­¹þ¤ß¤Îµö²Ä¤Ë²Ã¤¨¡¢¤µ¤é¤Ë trusty ¤ËÂФ·¤Æ¤Ï¡¢¤¹¤Ù¤Æ¤Î uid squashing ¤â̵¸ú¤Ë¤·¤Æ¤¤¤ë¡£ 2 ¹ÔÌÜ¤È 3 ¹ÔÌܤϡ¢¥Û¥¹¥È̾¤Ø¤Î¥ï¥¤¥ë¥É¥«¡¼¥É¤ÎÍøÍѤȡ¢¥Í¥Ã¥È¥°¥ë¡¼¥× (@trusted ¤Î¥¨¥ó¥È¥ê) ¤ÎÎã¤Ç¤¢¤ë¡£ 4 ¹ÔÌܤϡ¢¾å¤Ç½Ò¤Ù¤¿ PC/NFS ¥¯¥é¥¤¥¢¥ó¥ÈÍÑ¥¨¥ó¥È¥ê¤ÎÎã¤Ç¤¢¤ë¡£ 5 ¹ÔÌܤϡ¢¸ø³« FTP ¥Ç¥£¥ì¥¯¥È¥ê¤òÀ¤³¦Ãæ¤ÎÁ´¤Æ¤Î¥Û¥¹¥È¤Ë¥¨¥¯¥¹¥Ý¡¼¥È¤·¤Æ¤¤¤ë¡£ ¤¹¤Ù¤Æ¤Î¥ê¥¯¥¨¥¹¥È¤Ï nobody ¥¢¥«¥¦¥ó¥È¤Ç¼Â¹Ô¤µ¤ì¤ë¡£ ¤Þ¤¿¤³¤Î¥¨¥ó¥È¥êÃæ¤Î insecure ¥ª¥×¥·¥ç¥ó¤Ë¤è¤Ã¤Æ¡¢ NFS ÍÑ port ¤ò»È¤ï¤Ê¤¤¤è¤¦¤Ë¼ÂÁõ¤µ¤ì¤¿ NFS ¥¯¥é¥¤¥¢¥ó¥È¤«¤é¤Î¥¢¥¯¥»¥¹¤âµö²Ä¤·¤Æ¤¤¤ë¡£

¥Õ¥¡¥¤¥ë

/etc/exports