描述;
已经检测到未共享任何文件系统的多余NFS服务器。
怎么修;
禁用NFS服务器。
遗忘了,我认为我不想在所有CVM上禁用NFS服务器服务 - 是否有任何正式文档可以与我的同行分享以支持这一点,以便我可以免除这些系统的风险?
最好的答案danny_sre
\u00a0<\/p>
Since the CVM\u2019s are the storage controllers for the environment we would not want to disable NFS. This is particularly true if the hypervisors are ESXi ( ref:\u00a0https:\/\/portal.nutanix.com\/#\/page\/kbs\/details?targetId=kA032000000TStNCAW<\/a>\u00a0)\u00a0<\/p> CVM, Stargate service is always listening on ports 2049 (NFS), 3261\/3260 (iSCSi), 445 (SMB), no matter what kind of hypervisor we are using.\u00a0This can cause security scan warnings for vulnerabilities on CVM in the environment.<\/p> \u00a0<\/p> Please review and let me know if you have any additional questions.\u00a0<\/p> \u00a0<\/p> Thanks!<\/p> \u00a0<\/p> DannyR<\/p> \u00a0<\/p>","className":"post__content__best_answer"}">
Note the following:<\/p>