NFS Squash options

[DKE-77]

Setting up an NFS share and trying to determine what to choose for Squash settings. I have the share configured to a single IP address which is my Linux MINT VM. My goal is to lock this down as much as possible so only a single account on my Linux client can access the share with read/write permissions. I've changed the UID/GID on the client to match the Synology. Based on testing it appears that I can either use "No Mapping" or "Map Root to Guest". I've read various pros and cons for both of these squash options, but am still confused.

 

[Deleted member 5784]

This option only matters in cases where you are accessing files on the NAS as root on the Mint client. Ordinarily, you wouldn't be doing this, you'd be accessing files on the NAS using your reguar UID on the client; in this case, the squash settings don't come into play.

Root squashing prevents root on the client machine from acting as root (eg changing permisions) on the NAS, ie from having root permissions it hasnt been explicitly granted on the NAS. If in your setup this could possibly occur, eg you're allowing access to your NAS by the public or untrusted clients, you should definitely 'Map Root to Guest'. If this is just you using the setup privately, you could leave this as 'No Mapping'.

 

[DKE-77]

Thanks. I've chosen "Map Root to Guest" / no_root_squash as this seems more secure.

If the Guest account is deactivated on the Synology does this provide an additional layer of security?