Re: Did you know ...

[Steven Pritchard <steve@silug.org>]

Tighe said:
> You might also want to add the nosuid tag to those and the /home
> mount options.  Just a thought.

nosuid,nodev can be nice for /tmp.  It'll slow down the script
kiddies.  (I've been told that some things break if you use noexec.)
noexec on /home is a pain, but nosuid is OK.

Now that I think about it, something like this should work:

LABEL=/            /                       ext2    defaults               1 1
LABEL=/usr         /usr                    ext2    rw,nodev               1 2
LABEL=/var         /var                    ext2    rw,nosuid,noexec,nodev 1 2
LABEL=/var/spool   /var/spool              ext2    rw,nosuid,noexec,nodev 1 2
LABEL=/var/log     /var/log                ext2    rw,nosuid,noexec,nodev 1 2
LABEL=/tmp         /tmp                    ext2    rw,nosuid,nodev        1 2
LABEL=/home        /home                   ext2    rw,nosuid,nodev        1 2

If anyone wants to try it, let us know what breaks.  :-)

Steve
-- 
steve@silug.org           | Southern Illinois Linux Users Group
(618)398-7320             | See web site for meeting details.
Steven Pritchard          | http://www.silug.org/
-
To unsubscribe, send email to majordomo@silug.org with
"unsubscribe silug-discuss" in the body.