nfs-kernel-server dynamic ports should be implemented as static by default

Bug #1359587 reported by jean-christophe manciot
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
nfs-utils (Ubuntu)
Confirmed
Wishlist
Unassigned

Bug Description

There might be historic reasons to explain this strange behavior, but nowadays, no one needs some dynamic/random service ports to be open on his/her system.
The way to make these ports static is explained here: https://wiki.debian.org/SecuringNFS
These guidelines should be ***natively configured*** on Ubuntu. It's easy to pick a port range which will never be assigned by IANA.
On top of that,we would be able to control all NFS communications with ufw/gufw or any other firewall.

information type: Private Security → Public Security
Changed in nfs-utils (Ubuntu):
importance: Undecided → Wishlist
status: New → Confirmed
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.