If I want a nix share to be used by windows and other nix boxes should I just use smb for everything or should I use nfs aswell just for the nix boxes?
closed as primarily opinion-based by Panther, Eric Carvalho, Pilot6, Thomas, David Foerster Jul 15 '18 at 10:05
Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise. If this question can be reworded to fit the rules in the help center, please edit the question.
You should use SMB if you need to differentiate access rights for different users or user groups, and at the same time need to give
sudo right at least for some users.
Under NFS, a sudo-capable user can use
sudo su to impersonate any other user with the known name, gaining potentially unauthorized access (or, say, write access when only read access should be granted). While the root squash prevents from impersonating the root, it does not prevent from impersonating just another user.
NFS may be easier to setup and its limitations are not always relevant (say if all have read access for all content that is written or updated not via NFS). However as you need to use SMB anyway, it may be simpler to have everything SMB only. This may also help later against the argument to ditch all Linux workstations as "insecure".