RE: [CentOS] read only root file system

2008-05-25 Thread Jason Pyeron
A very big thanks -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100- - +1 (443)

Re: [CentOS] read only root file system

2008-05-25 Thread Linux
On Sat, May 24, 2008 at 8:29 PM, Fred Noz [EMAIL PROTECTED] wrote: In addition to easy maintenance, readonly-root adds a layer of security. The security is broken if someone gains access to the root user, but then many security protections are lost if someone gains root. However, this should

Re: [CentOS] read only root file system

2008-05-25 Thread Karanbir Singh
Linux wrote: However, this should *never* be used alone for security concerns. A compromiser can easily run that simple mount command to remount read-write after root access. I've been reading some of your recent comments, Anonymous looser, and I've really got to say this - you seem to make

Re: [CentOS] read only root file system

2008-05-25 Thread Linux
On Mon, May 26, 2008 at 2:15 AM, Karanbir Singh [EMAIL PROTECTED] wrote: I've been reading some of your recent comments, Anonymous looser, and I've really got to say this - you seem to make some authoritative style comments on things you really dont know much about. eg. in this case - the

Re: [CentOS] read only root file system

2008-05-25 Thread Karanbir Singh
Linux wrote: A cd-rom can provide security as a readonly mount, but readonly mounted ordinary filesystem/disk means almost nothing. Dont you read comments like administrator remounts read-write? Why? If your blockdev is exposed to the OS as 'ro', your administator can go jump off a cliff if he

Re: [CentOS] read only root file system

2008-05-24 Thread Fajar Priyanto
On Saturday 24 May 2008 12:05:30 Fred Noz wrote: Responding to a question posted earlier this month, Centos 5.1 includes configuration files for enabling the read-only root filesystem. Actually, all filesystems can be mounted read-only with particular files and directories mounted on a

Re: [CentOS] read only root file system

2008-05-02 Thread Barry Brimer
I am looking at having a read only box, it will not use a swap partition. Any recommendations? Why bother with a hard drive at all? Customize a Live CD/DVD and remove the hard drive alltogether. Barry ___ CentOS mailing list CentOS@centos.org

Re: [CentOS] read only root file system

2008-05-02 Thread Brett Serkez
On Fri, May 2, 2008 at 12:16 AM, Jason Pyeron [EMAIL PROTECTED] wrote: I am looking at having a read only box, it will not use a swap partition. Any recommendations? You'll need to break out your hard drive into multiple partitions, as there are certain portions of the file system that need to

RE: [CentOS] read only root file system

2008-05-02 Thread Jason Pyeron
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Barry Brimer Sent: Friday, May 02, 2008 8:21 AM To: CentOS mailing list Subject: Re: [CentOS] read only root file system I am looking at having a read only box, it will not use a swap partition

Re: [CentOS] read only root file system

2008-05-02 Thread gopinath
in the /etc/fstab define ro in the permissions field of the entry where the / partition is defined - Original Message - From: Brett Serkez [EMAIL PROTECTED] To: CentOS mailing list centos@centos.org Sent: Friday, May 02, 2008 5:58 PM Subject: Re: [CentOS] read only root file system

Re: [CentOS] read only root file system

2008-05-02 Thread Brett Serkez
On Fri, May 2, 2008 at 9:38 AM, Ralph Angenendt [EMAIL PROTECTED] wrote: Brett Serkez wrote: On Fri, May 2, 2008 at 12:16 AM, Jason Pyeron [EMAIL PROTECTED] wrote: I am looking at having a read only box, it will not use a swap partition. Any recommendations? You'll need to break

RE: [CentOS] read only root file system

2008-05-02 Thread Jason Pyeron
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Serkez Sent: Friday, May 02, 2008 9:43 AM To: CentOS mailing list Subject: Re: [CentOS] read only root file system On Fri, May 2, 2008 at 9:38 AM, Ralph Angenendt [EMAIL PROTECTED] wrote

Re: [CentOS] read only root file system

2008-05-02 Thread William L. Maltby
On Fri, 2008-05-02 at 15:38 +0200, Ralph Angenendt wrote: Brett Serkez wrote: On Fri, May 2, 2008 at 12:16 AM, Jason Pyeron [EMAIL PROTECTED] wrote: I am looking at having a read only box, it will not use a swap partition. Any recommendations? You'll need to break out your hard

Re: AW: RE: [CentOS] read only root file system

2008-05-02 Thread Torsten Luettgert
On Fri, 2008-05-02 at 19:22 +0200, Marc Rebischke wrote: I am looking at having a read only box, it will not use a swap partition. Any recommendations? I built a diskless, CD-based firewall some time ago which works fine. Of course you still need some writable directories, i.e. /var/run,

Re: [CentOS] read only root file system

2008-05-02 Thread Jeffrey Tadlock
On Fri, May 2, 2008 at 12:16 AM, Jason Pyeron [EMAIL PROTECTED] wrote: I am looking at having a read only box, it will not use a swap partition. Any recommendations? Here is a slide deck from a presentation Rick Troth has done on read only root file systems.