Re: trying out older (read-only, noexec, mount) security methods

• To: For users of Fedora Core releases <fedora-list@xxxxxxxxxx>
• Subject: Re: trying out older (read-only, noexec, mount) security methods
• From: Paul Howarth <paul@xxxxxxxxxxxx>
• Date: Wed, 09 Nov 2005 08:57:19 +0000
• In-reply-to: <1131497355.4755.10.camel@xxxxxxxxxxxxxxxxxxxx>
• List-help: <mailto:[email protected]?subject=help>
• List-id: For users of Fedora Core releases <fedora-list.redhat.com>
• List-post: <mailto:[email protected]>
• List-subscribe: <https://www.redhat.com/mailman/listinfo/fedora-list>, <mailto:[email protected]?subject=subscribe>
• List-unsubscribe: <https://www.redhat.com/mailman/listinfo/fedora-list>, <mailto:[email protected]?subject=unsubscribe>
• References: <1131497355.4755.10.camel@xxxxxxxxxxxxxxxxxxxx>
• Reply-to: For users of Fedora Core releases <fedora-list@xxxxxxxxxx>

On Wed, 2005-11-09 at 11:19 +1030, Tim wrote:
> Are there any known, current, problems with mounting certain things as
> read-only or noexec to minimise harm?  Such as making /tmp and /home
> noexec?  Or /usr read-only?  Or any other suggestions?

I have /var and /tmp mounted noexec,nodev in FC4 without issues on my
server.

Paul.
-- 
Paul Howarth <paul@xxxxxxxxxxxx>

• References:
  • trying out older (read-only, noexec, mount) security methods
    • From: Tim

• Prev by Date: Re: deleteing e-Mail, quota and dovecot
• Next by Date: Re: installing yumex by yum (FC4)
• Previous by thread: trying out older (read-only, noexec, mount) security methods
• Next by thread: Re: trying out older (read-only, noexec, mount) security methods
• Index(es):
  • Date
  • Thread