Sun Solaris System Admin » nfs

Manually Mount local/remote CDROM in Sun Solaris

admin — Tue, 29 Apr 2008 19:23:22 +0000

The Volume Manager (vold) daemon in Sun Solaris will automatically detect and mount a CDROM when inserted on Sun Solaris under /cdrom (if CD is not labelled )or /cdrom/ where is the label of the CD

In instances where vold is not running or when there is a need to manually mount the CDROM the following the procedure should help.

Logon to the Sun Server and switch user to root

sunsolaris$ su -
Password:

Indentify Device Name for CDROM

The device name for the CDROM is normally /dev/dsk/c0t6d0s2. However, you can find this as follows:

sunsolaris# ls -al /dev/sr* |awk ‘{print “/” $11}’

This returns the device name for the CDROM. In my case, /dev/dsk/c0t6d0s2

Mount CDROM

Assuming the mount point “/cdrom” already exists, mount the CDROM as follows:

sunsolaris# mount -F hsfs -o ro /dev/dsk/c0t6d0s2 /cdrom

where /dev/dsk/c0t6d0s2 is the device name for the CDROM

/cdrom is the mount point

Now, cd to CDROM to see the files from the CDROM mounted.

Mounting NFS shared remote CDROM

In order to mount a CDROM froma remote server sharing the CDROM, it has to be exported with root access. Mount the CDROM from the remote server as follows:

sunsolaris# mount remoteserver:/cdrom/cdrom0 /cdrom

where /cdrom/cdrom0 is the sharename on the remote server.

NFS Security – nfs_portmon to restrict client source port to privileged ports

admin — Thu, 24 Jan 2008 22:52:49 +0000

Network File System (NFS) security in Sun Solaris can be enhanced by restricting the source ports for the client connections for NFS to be only privileged ports. The privileged port range is from 512 to 1023. Enabling this security feature for NFS in solaris, checks if the source ports from the clients from privilege ports. This prevents malicious users from gaining access to files exported/shared by the NFS server by preventing custom RPC based scripts or applications being used on unprivileged ports.

In Sun Solaris 10 this is enabled by default. In Solaris 9 and earlier, this can be enabled by simply editing the /etc/system file and adding an entry for nfs_portmon.

Edit the /etc/system file

sunsolaris# vi /etc/system

Add the following line

set nfssrv:nfs_portmon = 1

If you by any chance run Solaris 2.5 or earlier then

set nfs:nfs_portmon = 1

This change requires a reboot of the server for it to take effect.

Reboot the server

sunsolaris# init 6

When the server reboots, the changes take effect.

In Solaris 8 and later, run the following to confirm the change:

sunsolaris# adb -k

nfs_portmon /D

If this returns “1″ indicates nfs_portmon is enabled else if it returns “0″ indicates nfs_portmon is not enabled.