Re: [CentOS] read only root file system

2008-05-25 Thread Karanbir Singh
Linux wrote: > A cd-rom can provide security as a readonly mount, but readonly > mounted ordinary filesystem/disk means almost nothing. Dont you read > comments like "administrator remounts read-write"? Why? If your blockdev is exposed to the OS as 'ro', your administator can go jump off a cliff i

Re: [CentOS] read only root file system

2008-05-25 Thread Linux
On Mon, May 26, 2008 at 2:15 AM, Karanbir Singh <[EMAIL PROTECTED]> wrote: > I've been reading some of your recent comments, Anonymous looser, and > I've really got to say this - you seem to make some authoritative style > comments on things you really dont know much about. eg. in this case - > the

Re: [CentOS] read only root file system

2008-05-25 Thread Karanbir Singh
Linux wrote: > However, this should *never* be used alone for security concerns. A > compromiser can easily run that simple mount command to remount > read-write after root access. I've been reading some of your recent comments, Anonymous looser, and I've really got to say this - you seem to make

Re: [CentOS] read only root file system

2008-05-25 Thread Linux
On Sat, May 24, 2008 at 8:29 PM, Fred Noz <[EMAIL PROTECTED]> wrote: > In addition to easy maintenance, readonly-root adds a layer of security. > The security is broken if someone gains access to the root user, but > then many security protections are lost if someone gains root. However, this shou

RE: [CentOS] read only root file system

2008-05-25 Thread Jason Pyeron
rday, May 24, 2008 1:30 PM > To: centos@centos.org > Subject: [CentOS] read only root file system > > On Saturday 24 May 2008 12:05:30 Fred Noz wrote: > > Responding to a question posted earlier this month, Centos 5.1 > > includes configuration files for enabling the rea

[CentOS] read only root file system

2008-05-24 Thread Fred Noz
On Saturday 24 May 2008 12:05:30 Fred Noz wrote: > Responding to a question posted earlier this month, Centos 5.1 > includes configuration files for enabling the read-only root > filesystem. Actually, all filesystems can be mounted read-only with > particular files and directories mounted on a read

Re: [CentOS] read only root file system

2008-05-24 Thread Fajar Priyanto
On Saturday 24 May 2008 12:05:30 Fred Noz wrote: > Responding to a question posted earlier this month, Centos 5.1 includes > configuration files for enabling the read-only root filesystem. > Actually, all filesystems can be mounted read-only with particular files > and directories mounted on a read

[CentOS] read only root file system

2008-05-23 Thread Fred Noz
Responding to a question posted earlier this month, Centos 5.1 includes configuration files for enabling the read-only root filesystem. Actually, all filesystems can be mounted read-only with particular files and directories mounted on a read-write tmpfs (in RAM). This capability comes directly fro

Re: [CentOS] read only root file system

2008-05-02 Thread Jeffrey Tadlock
On Fri, May 2, 2008 at 12:16 AM, Jason Pyeron <[EMAIL PROTECTED]> wrote: > I am looking at having a read only box, it will not use a swap partition. > Any recommendations? Here is a slide deck from a presentation Rick Troth has done on read only root file systems. http://linuxvm.org/present/SHAR

Re: AW: RE: [CentOS] read only root file system

2008-05-02 Thread Torsten Luettgert
On Fri, 2008-05-02 at 19:22 +0200, Marc Rebischke wrote: > I am looking at having a read only box, it will not use a swap > partition. > Any recommendations? I built a diskless, CD-based firewall some time ago which works fine. Of course you still need some writable directories, i.e. /var/run, /va

AW: RE: [CentOS] read only root file system

2008-05-02 Thread Marc Rebischke
I am looking at having a read only box, it will not use a swap partition. Any recommendations? Well, i tried two possibilities years ago.. 1.) : There are SCSI-Disks with jumpers for "Write Protect" , so you have a real Hardware write-protection. 2.) : Have a look at (Open)BSD's "Immutable Fla

Re: [CentOS] read only root file system

2008-05-02 Thread William L. Maltby
On Fri, 2008-05-02 at 15:38 +0200, Ralph Angenendt wrote: > Brett Serkez wrote: > > On Fri, May 2, 2008 at 12:16 AM, Jason Pyeron <[EMAIL PROTECTED]> wrote: > > > I am looking at having a read only box, it will not use a swap partition. > > > Any recommendations? > > > > You'll need to break out

RE: [CentOS] read only root file system

2008-05-02 Thread Jason Pyeron
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Brett Serkez > Sent: Friday, May 02, 2008 9:43 AM > To: CentOS mailing list > Subject: Re: [CentOS] read only root file system > > On Fri, May 2, 2008 at 9:38 AM, Ralph Ang

Re: [CentOS] read only root file system

2008-05-02 Thread Brett Serkez
On Fri, May 2, 2008 at 9:38 AM, Ralph Angenendt <[EMAIL PROTECTED]> wrote: > Brett Serkez wrote: > > On Fri, May 2, 2008 at 12:16 AM, Jason Pyeron <[EMAIL PROTECTED]> wrote: > > > I am looking at having a read only box, it will not use a swap partition. > > > Any recommendations? > > > > You'

Re: [CentOS] read only root file system

2008-05-02 Thread Ralph Angenendt
Brett Serkez wrote: > On Fri, May 2, 2008 at 12:16 AM, Jason Pyeron <[EMAIL PROTECTED]> wrote: > > I am looking at having a read only box, it will not use a swap partition. > > Any recommendations? > > You'll need to break out your hard drive into multiple partitions, as > there are certain porti

Re: [CentOS] read only root file system

2008-05-02 Thread gopinath
in the /etc/fstab define ro in the permissions field of the entry where the / partition is defined - Original Message - From: "Brett Serkez" <[EMAIL PROTECTED]> To: "CentOS mailing list" Sent: Friday, May 02, 2008 5:58 PM Subject: Re: [CentOS] read only root f

RE: [CentOS] read only root file system

2008-05-02 Thread Jason Pyeron
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Barry Brimer > Sent: Friday, May 02, 2008 8:21 AM > To: CentOS mailing list > Subject: Re: [CentOS] read only root file system > > > I am looking at having a read only

Re: [CentOS] read only root file system

2008-05-02 Thread Brett Serkez
On Fri, May 2, 2008 at 12:16 AM, Jason Pyeron <[EMAIL PROTECTED]> wrote: > I am looking at having a read only box, it will not use a swap partition. > Any recommendations? You'll need to break out your hard drive into multiple partitions, as there are certain portions of the file system that need

Re: [CentOS] read only root file system

2008-05-02 Thread Barry Brimer
I am looking at having a read only box, it will not use a swap partition. Any recommendations? Why bother with a hard drive at all? Customize a Live CD/DVD and remove the hard drive alltogether. Barry ___ CentOS mailing list CentOS@centos.org http:

[CentOS] read only root file system

2008-05-01 Thread Jason Pyeron
I am looking at having a read only box, it will not use a swap partition. Any recommendations? -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Pri