Re: SLFS book chapter proposals
Christos Gioran <[email protected]>
| Newsgroups | gmane.linux.lfs.security |
|---|---|
| Message-ID | <[email protected]> |
After some hours of sleep, I noted I missed a few points: There should be a chapter on setting up the system with regard to partitioning. The current LFS method does not contain pointers to create a system with certain directories lying on different filesystems, as is standard practice for secure installations. /tmp is a sure candidate, so are /var, /home and possibly /usr/local. I myself use different partitions for /opt, /usr, and /boot. Recommended and minimum sizes could be noted also, as well as certain permitions on these filesystems (e.g. /var is usually append-only, and /tmp has the sticky bit on) Another thing could be hints for the Linux Kernel configuration. Although we can't be aware what hardware the reader has, we could give some hints, such as "enable PF" or "keep keep features to a minimal" or even "for the hardcore out there, disable modules". More will come in mind himicos -- http://linuxfromscratch.org/mailman/listinfo/lfs-security FAQ: http://www.linuxfromscratch.org/faq/ Unsubscribe: See the above information page