Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The Network File System (NFS) anonymous UID and GID must be configured to values without permissions.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-932 | GEN005820 | SV-37854r1_rule | ECSC-1 IAIA-1 IAIA-2 | Medium |
| Description |
|---|
| When an NFS server is configured to deny remote root access, a selected UID and GID are used to handle requests from the remote root user. The UID and GID should be chosen from the system to provide the appropriate level of non-privileged access. |
| STIG | Date |
|---|---|
| Red Hat Enterprise Linux 5 Security Technical Implementation Guide | 2015-09-03 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-32316r1_fix) |
|---|
| Edit "/etc/exports" and set the "anonuid=-1" and "anongid=-1" options for exports lacking it. Re-export the filesystems. |