Arch Linux

RufusD

Member

Registered: 2010-03-21

Posts: 86

best setup for secured file shares?

Hi there!
I'm trying to set up a file server for my home network. Since, obviously, there's a WLAN access point, I'm a little concerned about security. So I've opted for sshfs with passwordless login to the server and the file shares listed in the clients' fstab.

However, I've run into problems (only the user who mounted the shares can even *see* them in the directory tree), which made me think the entire setup over. What would be my best bet? Is it samba with user-level security after all? NFS doesn't feature anything like this, does it?

Any ideas anybody?
Best wishes,
Rufus

-Syu

Member

Registered: 2012-01-24

Posts: 29

Re: best setup for secured file shares?

I'd use FTP (or samba, or NFS) over an SSH tunnel. That way, you only need one open port (less attack surface, easier administration), and the channel is secure in any case (whatever file sharing service you use).

65kid

Member

From: Germany

Registered: 2011-01-26

Posts: 663

Re: best setup for secured file shares?

However, I've run into problems (only the user who mounted the shares can even *see* them in the directory tree), which made me think the entire setup over.

actually sshfs has an fstab option for this: allow_other (see man sshfs)

RufusD

Member

Registered: 2010-03-21

Posts: 86

Re: best setup for secured file shares?

these are very good points!
@65kid: thanks, specifying allow_other in fstab and setting

# Allow non-root users to specify the 'allow_other' or 'allow_root'
# mount options.
#
user_allow_other

in /etc/fuse.conf solved my initial problem.

@-Syu: interesting. samba is attractive from the GUI point of view, since there's all kinds of browsers for samba shares, since automounting on access seems easier, .... But, AFAIR, these advantages would be lost by using an ssh tunnel. Or am I missing something?