Network Isolation
-
Use dedicated VLANs for NFS traffic.
-
Configure firewall rules to restrict access.
-
Never expose NFS to untrusted networks.
SELinux
Keep SELinux enabled and configure appropriate booleans:
# List NFS-related booleans
getsebool -a | grep nfs
# Set as needed
sudo setsebool -P use_nfs_home_dirs 1