Exporting GuardPoints over NFS

To setup and configure your NFS server so that you can export GuardPoints:

1. Make sure that CTE-U is started before the NFS server is started:

   vi /usr/lib/systemd/system/nfs-server.service

   Copy

   Response

   network-online.target local-fs.target secfs-fuse.service

   Copy

2. Create your GuardPoints on your NFS server.

3. Verify that the /etc/exports file contains the following:

   /guardpoint/path <nfs_server_IP>(rw,sync,fsid=3,no_root_squash)

   Copy

4. Verify that secfs_fuse was started before NFSD:

   ps -ef |grep secfs; ps -ef |grep nfsd nfsd pid

   Copy
   

   Note

   The GuardPoint PID is valid as long as the NFS daemon is not restarted.

5. If secfs_fuse was not started before NFSD, or if you are unable to verify it, restart the NFS server:

   service nfs-server restart

   Copy

6. Export the local directories to the NFS client. Type:

   exportfs -rvf

   Copy

7. Mount the client:

   mount -o lookupcache=none

   Copy

Warning

Only wide-open (applyKey/permit) policies are supported. Use of process sets, user sets, or signature sets is not supported.