{"description": "If NFS must be used, it should be deployed in the simplest\nconfiguration possible to avoid maintainability problems which may lead to\nunnecessary security exposure. Due to the reliability and security problems\ncaused by NFS (specially NFSv3 and NFSv2), it is not a good idea for systems\nwhich act as NFS servers to also mount filesystems via NFS. At the least,\ncrossed mounts (the situation in which each of two servers mounts a filesystem\nfrom the other) should never be used.", "warnings": [], "requires": [], "conflicts": [], "values": {}, "groups": {}, "rules": {}, "platform": "", "platforms": [], "inherited_platforms": [], "cpe_platform_names": [], "title": "Make Each System a Client or a Server, not Both", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/services/nfs_and_rpc/nfs_configuring_all_machines/nfs_client_or_server_not_both/group.yml"}