multiple partitions - useful mount options for extra security

Rudolf Floers r.floers at web.de
Thu Dec 14 04:04:55 PST 2000


> There are, of course, some non-default mount options that you can use 
> when mounting partitions that (can|may|might) help improve system 
> security. In particular, I think of the nosuid option... Does anyone else 
> use these or have thoughts on their use? See example below:

well think it's a good idea to mount var, tmp and maybe home rw,noexec and nodev.
everything else could be mounted ro, but unless you use devfs you will run into problems with /dev mounted readonly.

whadda think?

RF






More information about the lfs-security mailing list