I have Netapp version 8.2.2. I have the following security violation on it after scanned with security tool.
It said that the solution is to "configure NFS on the remote host so that only authorized hosts can mount its remote shares".
There are 12 servers, which are in a cluster, and additional 5 servers access and share the file system. What is the way to build the access list so that only these 17 servers can access the Netapp?
========================================================================================
Synopsis :
It is possible to access NFS shares on the remote host.
Description :
At least one of the NFS shares exported by the remote server could be
mounted by the scanning host. An attacker may be able to leverage
this to read (and possibly write) files on remote host.
The following NFS shares could be mounted :
+ /vol/LUN_RDM011_vol
+ Contents of /vol/LUN_RDM011_vol :
- .
- ..
- .snapshot
- LUN_RDM11
+ /vol/LUN_RDM012_vol
+ Contents of /vol/LUN_RDM012_vol :
- .
- ..
- .snapshot
- LUN_RDM12
+ /vol/LUN_RDM21_vol
+ Contents of /vol/LUN_RDM21_vol :
- .
- ..
- .snapshot
- LUN_RDM21
+ /vol/LUN_RDM22_vol
+ Contents of /vol/LUN_RDM22_vol :
- .
- ..
- .snapshot
- LUN_RDM22
+ /vol/LUN_RDM41_vol
+ Contents of /vol/LUN_RDM41_vol :
- .
- ..
- .snapshot
- LUN_RDM41
+ /vol/LUN_RDM51_vol
+ Contents of /vol/LUN_RDM51_vol :
....
....
Solution :
Configure NFS on the remote host so that only authorized hosts can
mount its remote shares.
