[torqueusers] NFS installed Torque/PBS ... security issues ...

Martin Siegert siegert at sfu.ca
Wed Sep 27 16:49:59 MDT 2006


Hi,

you do not really need the no_root_squash option.
Just run
chmod og+rx <prefix>/sbin/pbs_mom
after running "make install" on the NFS server.
(and no, I do not know why it isn't installed with those permissions
in the first place).

Cheers,
Martin

-- 
Martin Siegert
Head, HPC at SFU
WestGrid Site Lead
Academic Computing Services                phone: (604) 291-4691
Simon Fraser University                    fax:   (604) 291-4242
Burnaby, British Columbia                  email: siegert at sfu.ca
Canada  V5A 1S6

On Wed, Sep 27, 2006 at 09:20:59AM -0500, Richard Walsh wrote:
> All,
> 
> In cluster with NFS context, I assume that folks typically install Torque as
> root and so that the built binaries reside in a single location across 
> the cluster
> NFS mounted.  This requires the no_root_squash setting in the /etc/exports
> file.  If for security reasons this is not acceptable, what are the 
> other most
> convenient options. I can think of a non-root installation or multiple copy
> installation in a non-NFS mounted partition.  Both these have there short-
> comings.  Is there a  better approach?
> 
> You suggestions are appreciated.
> 
> rbw
> 
> -- 
> 
> Richard B. Walsh
> 
> Project Manager
> Network Computing Services, Inc.
> Army High Performance Computing Research Center (AHPCRC)
> rbw at ahpcrc.org  |  612.337.3467
> 
> -----------------------------------------------------------------------
> This message (including any attachments) may contain proprietary or
> privileged information, the use and disclosure of which is legally
> restricted.  If you have received this message in error please notify
> the sender by reply message, do not otherwise distribute it, and delete
> this message, with all of its contents, from your files.
> ----------------------------------------------------------------------- 
> 
> _______________________________________________
> torqueusers mailing list
> torqueusers at supercluster.org
> http://www.supercluster.org/mailman/listinfo/torqueusers


More information about the torqueusers mailing list