Another option, more restrictive, is noexec . It forbids to execute programs on the exported file system. This option is only usable on systems holding data only. On the NFS server side, we can also specify that we don't trust the client's root account. A set of UIDs can be specified to which the the option should apply.
Some actions are more general and effect the portmapper .
Good firewall rules also contribute to a better protection. Now we look at a more complicated network as you will find it e.g in a company. We configure charly as NIS server for domain bosley . First, let's see the configuration of our server charly . We start with defining some NIS maps holding all needed information.