6 Further Reading

RFCs

Some protocols have multiple RFCs, this list only contains the most recent ones.

• XDR serialization: RFC 4506
• SUN RPC protocol: RFC 5531
• rpcbind protocol: RFC 1833
• NFSv3 and mount protocol: RFC 1813
• NFSv4 protocol: RFC 7530
• NFSv4.1 protocol: RFC 5661
• NFSv4.2 protocol: RFC 7862
• RPC-with-TLS: RFC9289

Authentication Methods

• Overview of technical details: Solaris Documentation
• Weaknesses of Diffie-Hellman: Stronger security for NFS

Attacks

• The original no_subtree_check attack: NFS File Handle Security Technical Report
• Accessing file systems that are not exported linux
• Privilege escalation with no_root_squash on clients with nosuid: NFS Share no_root_squash - Linux Privilege Escalation
• Privilege escalation on an NFS server using hardlinks: Abusing Hardlinks Via NFS

NFS Client Libaries

• libnfs, a C library for NFSv3 with Python and Rust Bindings, low level: GitHub - sahlberg/libnfs: NFS client library
• pynfs, the library developed by the linux-nfs project for testing both NFSv3 and NFSv4, low level: pynfs
• anfs, a new asynchronous Python libary for NFSv3, high level: GitHub - skelsec/anfs: Asynchronous NFSv3 client in pure Python

Other links

More information on how RPCSEC_GSS is implemented on Linux: gssd