About NFS exports
At this stage I would like to approach the subject of NFS exports on CentOS 7. As it was noted in the preceding example, we used the following syntax:
(rw,sync,root_squash,no_all_squash)
Here, most of the options will be obvious to you; root_squash
will allow the root user on the client to both access and create files on the NFS server as root. Technically speaking, this option will force NFS to change the client's root to an anonymous ID and, in effect, this will increase security by preventing ownership of the root account on one system migrating to the other system. This is needed if you are hosting root filesystems on the NFS server (especially for diskless clients); with this in mind, it can be used (sparingly) for selected hosts, but you should not use no_root_squash
unless you are aware of the consequences.
Note
Other basic options for exports can include:
no_all_squash
: This option disables all squashing.rw
: This option enables the NFS server to use both read and write...