First page Back Continue Last page Overview Graphics
File System Support
NFSv4
- Often mentioned as obviating DM-Crypt et al
- Actually Orthogonal and complementary
- Updates NFS protocol to provide CIA
- Build on RPCSEC_GSS work
- Adds Client/Server Security Negotiation
- Provides for enforcement of Security Policy
- Can require security schema support bi-directionally
- Designed for future transparent extensions
- Excellent in combination with IPSec transport