Re: "Stock" fstab

2007-01-01 Thread Karl O. Pinc

On 01/01/2007 04:08:49 PM, Ingo Schwarze wrote:

The default is:

 - everything except / is nodev
 - everything except /sbin /usr /usr/bin /usr/sbin /usr/libexec
   /usr/libexec/* /usr/local /usr/local/* /usr/X11R6 /usr/X11R6/bin
   is nosuid
 - noexec is not used by default



Thanks to everybody.

Karl <[EMAIL PROTECTED]>
Free Software:  "You don't pay back, you pay forward."
 -- Robert A. Heinlein



Re: "Stock" fstab

2007-01-01 Thread Ingo Schwarze
Karl O. Pinc wrote on Mon, Jan 01, 2007 at 09:11:12PM +:
> Is the "stock" fstab documented anywhere?  That is,
> the fstab that you get if you use the recommended
> partitions that the install program sets up for you.

The comments in the install script are nice to read:
less /usr/src/distrib/miniroot/install.sh
/nosuid

> I've been shuffling partitions around and would like
> something to compare against with regards to
> mounting "noexec" "nosuid" etc.

The default is:

 - everything except / is nodev
 - everything except /sbin /usr /usr/bin /usr/sbin /usr/libexec
   /usr/libexec/* /usr/local /usr/local/* /usr/X11R6 /usr/X11R6/bin
   is nosuid
 - noexec is not used by default



Re: "Stock" fstab

2007-01-01 Thread Joachim Schipper
On Mon, Jan 01, 2007 at 09:11:12PM +, Karl O. Pinc wrote:
> Is the "stock" fstab documented anywhere?  That is,
> the fstab that you get if you use the recommended
> partitions that the install program sets up for you.
> 
> I've been shuffling partitions around and would like
> something to compare against with regards to
> mounting "noexec" "nosuid" etc.

It can be extracted from /usr/src/distrib/miniroot/install.sh, I
presume; but here's the default options:

/dev/xxx/   ffw rw  1 1
/dev/xxx/home   ffs rw,nodev,nosuid 1 2
/dev/xxx/tmpffs rw,nodev,nosuid 0 2
/dev/xxx/usrffs rw,nodev1 2
/dev/xxx/varffs rw,nodev,nosuid 1 2

Of course, adding softdep might be useful. I'm not 100% positive on the
'dump' flag on /tmp - it might have been set to 1 initially. But if you
use it, you will know about that.

Joachim



Re: "Stock" fstab

2007-01-01 Thread Darrin Chandler
On Mon, Jan 01, 2007 at 09:11:12PM +, Karl O. Pinc wrote:
> Is the "stock" fstab documented anywhere?  That is,
> the fstab that you get if you use the recommended
> partitions that the install program sets up for you.
> 
> I've been shuffling partitions around and would like
> something to compare against with regards to
> mounting "noexec" "nosuid" etc.

I have /usr as nodev, and others as nodev,nosuid. Excepting /, of
course.

Depending on how you've split things up, you can be more or less
restrictive on some things if you like. Some of the /usr tree doesn't
need suid or exec, for instance.

-- 
Darrin Chandler|  Phoenix BSD Users Group
[EMAIL PROTECTED]   |  http://bsd.phoenix.az.us/
http://www.stilyagin.com/  |



"Stock" fstab

2007-01-01 Thread Karl O. Pinc

Is the "stock" fstab documented anywhere?  That is,
the fstab that you get if you use the recommended
partitions that the install program sets up for you.

I've been shuffling partitions around and would like
something to compare against with regards to
mounting "noexec" "nosuid" etc.

Thanks.

Karl <[EMAIL PROTECTED]>
Free Software:  "You don't pay back, you pay forward."
 -- Robert A. Heinlein