Re: [/tmp partition secure]

2006-08-31 Thread Michael Wilsker
Denis, What do you mean by "mount in a secure mode"? Please be more specific. Do you want to prevent binaries from being executable? Do you want to prevent setuid programs from running? Short of encrypting /tmp, the man page for mount(8) describes all of the mounting options you are likel

Re: /tmp partition secure

2006-08-31 Thread Alexander Hall
Andy Hayward wrote: On 8/31/06, Alexander Hall <[EMAIL PROTECTED]> wrote: Andy Hayward wrote: > On 8/31/06, Joachim Schipper <[EMAIL PROTECTED]> wrote: >> I don't know what secure mode means, but a ramdisk (mount_mfs(8)) would >> be difficult to get data from, and pretty quick; an encrypted vn

/tmp partition secure

2006-08-31 Thread Andy Hayward
On 8/31/06, Alexander Hall <[EMAIL PROTECTED]> wrote: Andy Hayward wrote: > On 8/31/06, Joachim Schipper <[EMAIL PROTECTED]> wrote: >> I don't know what secure mode means, but a ramdisk (mount_mfs(8)) would >> be difficult to get data from, and pretty quick; an encrypted vnd >> interface (see vnc

Re: [/tmp partition secure]

2006-08-31 Thread Alexander Hall
Andy Hayward wrote: On 8/31/06, Joachim Schipper <[EMAIL PROTECTED]> wrote: I don't know what secure mode means, but a ramdisk (mount_mfs(8)) would be difficult to get data from, and pretty quick; an encrypted vnd interface (see vnconfig(8)) would also be pretty secure. Once you turn off the com

Re: [/tmp partition secure]

2006-08-31 Thread Damien Miller
On Thu, 31 Aug 2006, Joachim Schipper wrote: > On Wed, Aug 30, 2006 at 12:11:15PM -0300, Denis Augusto Araujo de Souza wrote: > > Friends, > > > > I'm needing to mount a /tmp partition in a secure mode. Which is > > the best way to fstab file configuration? > > I don't know what secure mode

Re: [/tmp partition secure]

2006-08-31 Thread Andy Hayward
On 8/31/06, Joachim Schipper <[EMAIL PROTECTED]> wrote: I don't know what secure mode means, but a ramdisk (mount_mfs(8)) would be difficult to get data from, and pretty quick; an encrypted vnd interface (see vnconfig(8)) would also be pretty secure. Once you turn off the computer, of course...

Re: [/tmp partition secure]

2006-08-31 Thread Joachim Schipper
On Wed, Aug 30, 2006 at 12:11:15PM -0300, Denis Augusto Araujo de Souza wrote: > Friends, > > I'm needing to mount a /tmp partition in a secure mode. Which is > the best way to fstab file configuration? I don't know what secure mode means, but a ramdisk (mount_mfs(8)) would be difficult to

Re: [/tmp partition secure]

2006-08-30 Thread Julien TOUCHE
Denis Augusto Araujo de Souza wrote on 30/08/2006 17:11: > I'm needing to mount a /tmp partition in a secure mode. Which is > the best way to fstab file configuration? it depends on what secure is for you ? no /tmp maybe ? or restricting to root access ? or using noexec,nodev,nosuid flags ?

Re: [/tmp partition secure]

2006-08-30 Thread Antoine Jacoutot
On Wed, 30 Aug 2006, Ted Unangst wrote: I'm needing to mount a /tmp partition in a secure mode. Which is the best way to fstab file configuration? chmod 0 /tmp ? that's a pretty secure mode. not too useful though. You can always try 'chmod 1733 /tmp' though. -- Antoine

Re: [/tmp partition secure]

2006-08-30 Thread Ted Unangst
On 8/30/06, Denis Augusto Araujo de Souza <[EMAIL PROTECTED]> wrote: Friends, I'm needing to mount a /tmp partition in a secure mode. Which is the best way to fstab file configuration? chmod 0 /tmp ? that's a pretty secure mode. not too useful though.

[/tmp partition secure]

2006-08-30 Thread Denis Augusto Araujo de Souza
Friends, I'm needing to mount a /tmp partition in a secure mode. Which is the best way to fstab file configuration? Thanks in advance, Denis