Man page or keyword search:   man All Sections 1 - General Commands 2 - System Calls 3 - Subroutines, Functions 4 - Special Files 5 - File Formats 6 - Games and Screensavers 7 - Macros and Conventions 8 - Maintenence Commands 9 - Kernel Interface New Commands Server 4.4BSD AIX Alpinelinux Archlinux Aros BSDOS BSDi Bifrost CentOS Cygwin Darwin Debian DigitalUNIX DragonFly ElementaryOS Fedora FreeBSD Gentoo GhostBSD HP-UX Haiku Hurd IRIX Inferno JazzOS Kali Knoppix LinuxMint MacOSX Mageia Mandriva Manjaro Minix MirBSD NeXTSTEP NetBSD OPENSTEP OSF1 OpenBSD OpenDarwin OpenIndiana OpenMandriva OpenServer OpenSuSE OpenVMS Oracle PC-BSD Peanut Pidora Plan9 QNX Raspbian RedHat Scientific Slackware SmartOS Solaris SuSE SunOS Syllable Tru64 UNIXv7 Ubuntu Ultrix UnixWare Xenix YellowDog aLinux   10987 pages apropos Keyword Search (all sections) Output format html ascii pdf view pdf save postscript

nfs_portmon(5)							nfs_portmon(5)

NAME
       nfs_portmon  - enable/disable the NFS server's source port verification
       check

VALUES
   Failsafe
   Default
   Allowed values
DESCRIPTION
       controls some security checking that  the  NFS  server  can  do	in  an
       attempt to enforce integrity on the part of its clients. The NFS server
       can check to see whether the source port from which a request was  sent
       is a reserved port; a reserved port is a port whose port number is less
       then 1024. For BSD-based systems, these ports  are  reserved  for  pro‐
       cesses being run by privileged users. This checking helps prevent users
       from writing their own RPC-based applications which defeat  the	access
       checking that the NFS server uses.

   Who Is Expected to Change This Tunable?
       The  distributed	 file system administrator should examine the value of
       this parameter if he or she wishes  to  prevent	malicious  users  from
       gaining	access to files by using an NFS server they would not ordinar‐
       ily be able to access.

   Restrictions on Changing
       The tunable is dynamic; any change will take effect immediately on  the
       running system.

       The  reserved  port  notion  is	not  universally supported. Therefore,
       interoperability problems might result if this checking is enabled.

   What Are the Side Effects of Enabling This Check?
       Some NFS clients may not be able to connect to the NFS server.

WARNINGS
       All HP-UX kernel tunable parameters are release specific.  This parame‐
       ter  may	 be  removed or have its meaning changed in future releases of
       HP-UX.

       Installation of optional kernel software, from HP or other vendors, may
       cause  changes  to  tunable parameter values.  After installation, some
       tunable parameters may no longer be at the default or recommended  val‐
       ues.  For information about the effects of installation on tunable val‐
       ues, consult the documentation for the kernel software being installed.
       For  information	 about	optional  kernel  software  that  was  factory
       installed on your system, see at

AUTHOR
       was developed by Sun Microsystems, Inc.

SEE ALSO
       kctune(1M), sam(1M), gettune(2), settune(2).

			   Tunable Kernel Parameters		nfs_portmon(5)

Vote for polarhome