Subject: Re: devfs (was Re: Not updating device file inode change times)
To: None <tech-security@netbsd.org>
From: Michael C. Richardson <mcr@sandelman.ottawa.on.ca>
List: tech-security
Date: 09/07/1998 01:36:20
  Why not make sure that if you allow NFS clients to NFS mount one of your
disks in a way that means they may have to create files that you put
"nodev" on the mount options?
  I'd even go as far as to suggest that "nodev" should be default for
all but root. 
  The mount man page even says:

             nodev       Do not interpret character or block special devices
                         on the file system.  This option is useful for a
                         server that has file systems containing special de-
                         vices for architectures other than its own.

   :!mcr!:            |  Network and security consulting/contract programming
   Michael Richardson |         Firewalls, TCP/IP and Unix administration
 Personal: mcr@sandelman.ottawa.on.ca. PGP key available.
 Corporate: sales@sandelman.ottawa.on.ca. 
	ON HUMILITY: To err is human, to moo bovine.