Exporting GuardPoints over NFS
To setup and configure your NFS server so that you can export GuardPoints:
-
Make sure that CTE-U is started before the NFS server is started:
vi /usr/lib/systemd/system/nfs-server.serviceResponse
network-online.target local-fs.target secfs-fuse.service -
Create your GuardPoints on your NFS server.
-
Verify that the
/etc/exportsfile contains the following:/guardpoint/path <nfs_server_IP>(rw,sync,fsid=3,no_root_squash) -
Verify that
secfs_fusewas started before NFSD:ps -ef |grep secfs; ps -ef |grep nfsd nfsd pidNote
The GuardPoint PID is valid as long as the NFS daemon is not restarted.
-
If
secfs_fusewas not started before NFSD, or if you are unable to verify it, restart the NFS server:service nfs-server restart -
Export the local directories to the NFS client. Type:
exportfs -rvf -
Mount the client:
mount -o lookupcache=none
Warning
Only wide-open (applyKey/permit) policies are supported. Use of process sets, user sets, or signature sets is not supported.