Network Isolation
-
Use dedicated VLANs for NFS traffic.
-
Configure UFW rules to restrict access.
-
Never expose NFS to untrusted networks.
AppArmor Configuration
AppArmor is enabled by default on Ubuntu. Check status:
# Check AppArmor status
sudo aa-status
# If NFS access is blocked, check logs
sudo journalctl | grep apparmor | grep DENIED