https://opscode.io/tags/nfs/Recent content in Nfs on OpscodeHugo -- 0.164.0en-usTue, 16 Jun 2026 00:00:00 +0000https://opscode.io/posts/nfsv3-authsys-identity-spoofing/Tue, 16 Jun 2026 00:00:00 +0000https://opscode.io/posts/nfsv3-authsys-identity-spoofing/NFSv3 with AUTH_SYS trusts whatever UID and GID the client claims. Where it serves home directories, an unprivileged user can become any other user: read their files, write to public SSH keys and shell rc files, and create SUID binaries owned by other users for user impersonation and potentially root escalation. In environments where home directories are centrally exported and mounted across many hosts, one foothold can become lateral movement across large portions of the infrastructure.