Network Isolation
-
Use dedicated VLANs for NFS traffic
-
Configure firewall rules to restrict access
-
Never expose NFS to untrusted networks
SELinux
Keep SELinux enabled and configure appropriate booleans:
# List NFS-related booleans
getsebool -a | grep nfs
# Set as needed
sudo setsebool -P use_nfs_home_dirs 1