Re: [K12ltsp-list] Re: [Etherboot-developers] Moving ltsroot out of/tftpboot

[Jim McQuillan <jam McQuil com>]

Eric,

Maybe I don't understand your comment about mounting ltsroot 'ro'.

It is exported Read-only.

Here's the line from the /etc/exports file, as it is setup
by the lts-core package:

   /tftpboot/lts/ltsroot  192.168.100.0/255.255.255.0(ro,no_root_squash)


Jim McQuillan
jam ltsp org


Eric Harrison wrote:
> 
> Currently the LTSP exports /tftpboot/lts/ltsroot with the "no_root_squash"
> parameter. NFS exports make me nervous, especially with no_root_squash.
> I also would like to see ~ltsroot to be easily ro mounted.  Since NFS
> delegates both authentication and authorization to the client, a prudent
> security policy would dictate that the export partition be mounted read
> only.