Re: SLFS book chapter proposals

Christos Gioran <[email protected]>
Newsgroups gmane.linux.lfs.security
Message-ID <[email protected]>
After some hours of sleep, I noted I missed a few points:

	There should be a chapter on setting up the system with regard to 
partitioning. The current LFS method does not contain pointers to create a 
system with certain directories lying on different filesystems, as is 
standard practice for secure installations. /tmp is a sure candidate, so are 
/var, /home and possibly /usr/local. I myself use different partitions for 
/opt, /usr, and /boot. Recommended and minimum sizes could be noted also, as 
well as certain permitions on these filesystems (e.g. /var is usually 
append-only, and /tmp has the sticky bit on)
	Another thing could be hints for the Linux Kernel configuration. Although we 
can't be aware what hardware the reader has, we could give some hints, such 
as "enable PF" or "keep keep features to a minimal" or even "for the hardcore 
out there, disable modules".

More will come in mind

himicos
-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.