Does everyone need access to kbox/datastore/internal/tftpboot/dummy?
We're cleaning up vulnerabilities and need to know if the paths below are required to be accessible by everyone.
If everyone does need access, then can we lock them down to our specific subnets without compromising anything?
/kbox/datastore/internal/tftpboot/dummy
/kbox/datastore/internal/tftpboot/netboot0003
/kbox/datastore/internal/tftpboot/netboot0023
Thanks,
0 Comments
[ + ] Show comments
Answers (1)
Please log in to answer
Posted by:
genfoch01
9 years ago
tftp for PXE boot requires 777 ( all access ) permissions to work since the files are accessed at boot time, there is no method to authenticate a client. you can set up Firewall rules to restrict access to the K2 for external networks or for some of your internal networks but care must be taken to ensure machines that legitimately need to PXE boot or Netboot (for MAC ) have full access.
