mount /usr

2014-06-05 Thread Pieter Verberne
$ mount /dev/wd0a on / type ffs (NFS exported, local, noatime, softdep) /dev/wd0d on /usr type ffs (local, noatime, nodev, softdep) /dev/wd1a on /home type ffs (NFS exported, local, nodev, nosuid) /dev/sd0a on /usr type ffs (local) $ oops... :-)

Re: mount /usr

2014-06-05 Thread Alexander Hall
On June 5, 2014 2:26:44 PM CEST, Pieter Verberne pieterverbe...@xs4all.nl wrote: $ mount /dev/wd0a on / type ffs (NFS exported, local, noatime, softdep) /dev/wd0d on /usr type ffs (local, noatime, nodev, softdep) /dev/wd1a on /home type ffs (NFS exported, local, nodev, nosuid) /dev/sd0a on /usr

Re: mount /usr

2014-06-05 Thread Pieter Verberne
On 2014-06-05 18:25, Alexander Hall wrote: On June 5, 2014 2:26:44 PM CEST, Pieter Verberne pieterverbe...@xs4all.nl wrote: $ mount /dev/wd0a on / type ffs (NFS exported, local, noatime, softdep) /dev/wd0d on /usr type ffs (local, noatime, nodev, softdep) /dev/wd1a on /home type ffs (NFS

Re: mount /usr

2014-06-05 Thread Alexander Hall
On June 5, 2014 6:56:42 PM CEST, Pieter Verberne pieterverbe...@xs4all.nl wrote: On 2014-06-05 18:25, Alexander Hall wrote: On June 5, 2014 2:26:44 PM CEST, Pieter Verberne pieterverbe...@xs4all.nl wrote: $ mount /dev/wd0a on / type ffs (NFS exported, local, noatime, softdep) /dev/wd0d on

Re: mount /usr

2014-06-05 Thread Christian Weisgerber
On 2014-06-05, Pieter Verberne pieterverbe...@xs4all.nl wrote: /dev/sd0a on /usr type ffs (local) I was thinking about a way out if this. I was remote at that moment. It's funny because the only way out is to pull the power cable. A SSH session was still up but I was logged in as a regular

Re: mount /usr partition nosuid

2009-12-04 Thread Mauro Rezzonico
Mark Romer wrote: Yes, so this would already be done in openbsd. You will soon discover that in OpenBSD, you don't have to go around the system hardening it... -- Mauro Rezzonico ma...@ch23.org, Como, Italia Maybe this world is another planet's hell - H.Huxley

mount /usr partition nosuid

2009-12-03 Thread Mark Romer
Hello All, Sorry if it has been asked in the past, but is it ok to mount the /usr partition as nosuid? What if any default programs will that break? And also does that give me any added security benefits? Running 4.6 release generic i386 thanks, Mark

Re: mount /usr partition nosuid

2009-12-03 Thread Christopher Linn
On Thu, Dec 03, 2009 at 02:08:29PM -0500, Mark Romer wrote: Hello All, Sorry if it has been asked in the past, but is it ok to mount the /usr partition as nosuid? What if any default programs will that break? And also does that give me any added security benefits? Running 4.6 release

Re: mount /usr partition nosuid

2009-12-03 Thread Joachim Schipper
On Thu, Dec 03, 2009 at 02:08:29PM -0500, Mark Romer wrote: Hello All, Sorry if it has been asked in the past, but is it ok to mount the /usr partition as nosuid? What if any default programs will that break? And also does that give me any added security benefits? Running 4.6 release

Re: mount /usr partition nosuid

2009-12-03 Thread Josh Grosse
On Thu, 3 Dec 2009 14:08:29 -0500, Mark Romer wrote Hello All, Sorry if it has been asked in the past, but is it ok to mount the /usr partition as nosuid? What if any default programs will that break? Find out for yourself. See how Set-User-ID mode and Set-Group-ID mode are reported

Re: mount /usr partition nosuid

2009-12-03 Thread Eugene Yunak
2009/12/3 Mark Romer romes...@gmail.com: Hello All, Sorry if it has been asked in the past, but is it ok to mount the /usr partition as nosuid? What if any default programs will that break? B And also does that give me any added security benefits? Running 4.6 release generic i386 thanks,

Re: mount /usr partition nosuid

2009-12-03 Thread Christopher Linn
On Thu, Dec 03, 2009 at 09:55:38PM +0200, Eugene Yunak wrote: 2009/12/3 Mark Romer romes...@gmail.com: Hello All, Sorry if it has been asked in the past, but is it ok to mount the /usr partition as nosuid? What if any default programs will that break? B And also does that give me any

Re: mount /usr partition nosuid

2009-12-03 Thread Mark Romer
All, thanks for the responses so far. I work for the Fed and we have to setup a dns sec bind server on our end. I was just reading some of their advice on setting up the server... 2. Mount BIND's chroot filesystem with the noexec,nosuid,nodev options. Of course all their instructions are for

Re: mount /usr partition nosuid

2009-12-03 Thread Otto Moerbeek
On Thu, Dec 03, 2009 at 03:30:15PM -0500, Mark Romer wrote: All, thanks for the responses so far. I work for the Fed and we have to setup a dns sec bind server on our end. I was just reading some of their advice on setting up the server... 2. Mount BIND's chroot filesystem with the

Re: mount /usr partition nosuid

2009-12-03 Thread Mark Romer
Ok, I am not sure if I am replying to just that user or the whole group, when using the gmail client... anyway All, thanks for the responses so far. I work for the Fed and we have to setup a dns sec bind server on our end. I was just reading some of their advice on setting up the server...

Re: mount /usr partition nosuid

2009-12-03 Thread Matthew Weigel
On Thu, 3 Dec 2009 15:30:15 -0500, Mark Romer romes...@gmail.com wrote: All, thanks for the responses so far. I work for the Fed and we have to setup a dns sec bind server on our end. I was just reading some of their advice on setting up the server... 2. Mount BIND's chroot filesystem

Re: mount /usr partition nosuid

2009-12-03 Thread Mark Romer
Ah yes, thanks Otto ! I think I was getting confused between the named binary in /usr/sbin/ and where the bind files are chrooted under /var/named Yes, so this would already be done in openbsd. thanks, Mark On Thu, Dec 3, 2009 at 2:08 PM, Mark Romer romes...@gmail.com wrote: Hello All,