Originally posted by: Nothinman
But what does keeping / small and the nodev option actually get you?
Originally posted by: Corey0808
Lol your discussion (n0cmonkey & Nothinman) is just getting me confused. Can you both summarize what you think I should do and I could make the decision from there please? Thanks I really appreciate it 🙂
Originally posted by: Nothinman
I know what nodev does, but what does that actually get you? You need to be root to create device nodes and if you're root, it's simple to run 'mount -o remount,dev /usr'.
And they're not seperated, sure from the kernel view they're logically seperate filesystems. But from the user's standpoint, it's one big tree and mounting /usr from a seperate device has no advantages.
Imagine a worm going through that deposits a suid binary that binds a shell to a port. Isnt' that enough reason to use nosuid? nodev? Welll that's trickier.
Originally posted by: Nothinman
Imagine a worm going through that deposits a suid binary that binds a shell to a port. Isnt' that enough reason to use nosuid? nodev? Welll that's trickier.
nosuid, maybe. But if you put nosuid on /usr you'll break things like at, passwd, smbmount, sudo etc that sit in /usr/bin.
Originally posted by: Corey0808
What's a SUID?
So I was thinking about this
/
/home
/usr
swap
possibly /boot
NetBSD and OpenBSD make use of it. I'd be surprised if google didn't use it.
Originally posted by: Nothinman
NetBSD and OpenBSD make use of it. I'd be surprised if google didn't use it.
Well you said noone used EAs and that wasn't true either.
Originally posted by: n0cmonkey
/boot if you swing that way.