Re: SLFS book chapter proposals
Christos Gioran <[email protected]>
| Newsgroups | gmane.linux.lfs.security |
|---|---|
| Message-ID | <[email protected]> |
> > There should be a chapter on setting up the system with regard to > > partitioning. The current LFS method does not contain pointers to create > > a system with certain directories lying on different filesystems, as is > > standard practice for secure installations. /tmp is a sure candidate, so > > are /var, /home and possibly /usr/local. I myself use different > > partitions for /opt, /usr, and /boot. Recommended and minimum sizes could > > be noted also, as well as certain permitions on these filesystems (e.g. > > /var is usually append-only, and /tmp has the sticky bit on) > > Another thing could be hints for the Linux Kernel configuration. > > Although we can't be aware what hardware the reader has, we could give > > some hints, such as "enable PF" or "keep keep features to a minimal" or > > even "for the hardcore out there, disable modules". > > > > More will come in mind > > > > himicos > > I have tried to setup multiple partitons a few times but they turned out to > be false starts because I got confused on partition sizes, permissions, > etc. Some information on seting up a partition layout would be helpful. To begin with: You install normally chapter 5. Everything goes under /tools, no other dirs created or needed. Then chroot and create the directory structure, FHS-like. Just after that you mount the desired partitions under each dir and continue normally. As far as sizes are concerned, I usually proceed as follows: I make an installation under a singe partition (apart from /boot) of sufficien size. Then, after it is complete, I do a "du -sch /dir". This gives the size of the /dir in Megs. I note down the info obdained that way for all dirs that wil be hosted in a seperate partition. I partition the HDD with a desired scheme, following the info obtained; that's it! Of course, you take into consideration the variation (usually growing) of the amount of data over time. Again you must estimate these values based on expected usage. If you plan to do a standard install and use nothing more than a bse system and X, only choose wisely the size of /home. The rest directories should not change much. A standard exception is /var, that holds the logs which always grow. I think it is not possible to provide standard figures for an install, apart for the sizes that result from a standard buld of (S)LFS. Its up to the user to cater for his future needs. Possible suggestions should be a seperate /boot, /home and possibly /var, to face disk space overwhelming from users. Guess the magic word is "quota", but partitioning offers better control. More to follow (have to dig up some documentation) -- himicos -- http://linuxfromscratch.org/mailman/listinfo/lfs-security FAQ: http://www.linuxfromscratch.org/faq/ Unsubscribe: See the above information page