How to secure nfs share ?

[Éric Quinton]

Hello,

Actually, the folder /images/dev must be with 777 mode, for upload images. At the end of the upload, the folder <mac address> is move to /images, an it’s rename. But the images files keep their rights : everybody can write another image at their places.

For the moment, I’ve cron this script to change the access rights :
#!/bin/bash
RACINE=/opt/fog
for DOSSIER in find $RACINE -perm 777 -type d|grep -v dev
do
chmod -R o-w $DOSSIER
chown -R fog $DOSSIER
done

My NFS server is installed into a second computer.

Do you have a suggestion to improve that ?

Thanks,

Eric.