no_root_squash on an NFS export gives root on any client full root over your storage. One compromised box, setuid bash, game over. Here's when it's justified, valtersit.com/guides/databases… #nfs #linux #storage
valtersit.com NFS no_root_squash: How to Give Root Access to Your Entire Storage Array