Gentoo Archives: gentoo-security

From: Paul de Vrieze <pauldv@g.o>
To: gentoo-security@l.g.o
Subject: Re: [gentoo-security] mount noexec and ro
Date: Sat, 04 Nov 2006 19:10:54
Message-Id: 200611042003.33164.pauldv@gentoo.org
In Reply to: Re: [gentoo-security] mount noexec and ro by Joe Knall
1 On Saturday 04 November 2006 17:27, Joe Knall wrote:
2 > correct, it's atually like this
3 > /srv/www type ext3 (ro,nosuid,nodev,acl,user_xattr)
4 > /srv/www/data type ext3 (rw,noexec,nosuid,acl,user_xattr)
5 >
6 > but I need a /dev, currently data/dev with null and urandom there,
7 > writeable and not nodev (could as well be a separate partition).
8 > Do you think this turns all the rest in vain?
9
10 Nodev is mainly for those situations where you may not have full control over
11 the disk (like usb sticks). But the ability to have devices will mean that
12 those who can make devices can abuse them.
13
14 Paul
15
16 --
17 Paul de Vrieze
18 Gentoo Developer
19 Mail: pauldv@g.o
20 Homepage: http://www.devrieze.net

Replies

Subject Author
Re: [gentoo-security] mount noexec and ro Miguel Angel Tormo Alfaro <matormo@××××××.es>