multiple partitions - useful mount options for extra security
r.floers at web.de
Thu Dec 14 04:04:55 PST 2000
> There are, of course, some non-default mount options that you can use
> when mounting partitions that (can|may|might) help improve system
> security. In particular, I think of the nosuid option... Does anyone else
> use these or have thoughts on their use? See example below:
well think it's a good idea to mount var, tmp and maybe home rw,noexec and nodev.
everything else could be mounted ro, but unless you use devfs you will run into problems with /dev mounted readonly.
More information about the lfs-security