Re: SLFS book chapter proposals

Christos Gioran <[email protected]>
Newsgroups gmane.linux.lfs.security
Message-ID <[email protected]>
> > 	There should be a chapter on setting up the system with regard to
> > partitioning. The current LFS method does not contain pointers to create
> > a system with certain directories lying on different filesystems, as is
> > standard practice for secure installations. /tmp is a sure candidate, so
> > are /var, /home and possibly /usr/local. I myself use different
> > partitions for /opt, /usr, and /boot. Recommended and minimum sizes could
> > be noted also, as well as certain permitions on these filesystems (e.g.
> > /var is usually append-only, and /tmp has the sticky bit on)
> > 	Another thing could be hints for the Linux Kernel configuration.
> > Although we can't be aware what hardware the reader has, we could give
> > some hints, such as "enable PF" or "keep keep features to a minimal" or
> > even "for the hardcore out there, disable modules".
> >
> > More will come in mind
> >
> > himicos
>
> I have tried to setup multiple partitons a few times but they turned out to
> be false starts because I got confused on partition sizes, permissions,
> etc. Some information on seting up a partition layout would be helpful.

To begin with: You install normally chapter 5. Everything goes under /tools, 
no other dirs created or needed. Then chroot and create the directory 
structure, FHS-like. Just after that you mount the desired partitions under 
each dir and continue normally.

As far as sizes are concerned, I usually proceed as follows: I make an 
installation under a singe partition (apart from /boot) of sufficien size. 
Then, after it is complete, I do a "du -sch /dir". This gives the size of the 
/dir in Megs. I note down the info obdained that way for all dirs that wil be 
hosted in a seperate partition. I partition the HDD with a desired scheme, 
following the info obtained; that's it! Of course, you take into 
consideration the variation (usually growing) of the amount of data over 
time. Again you must estimate these values based on expected usage. If you 
plan to do a standard install and use nothing more than a bse system and X, 
only choose wisely the size of /home. The rest directories should not change 
much. A standard exception is /var, that holds the logs which always grow. I 
think it is not possible to provide standard figures for an install, apart 
for the sizes that result from a standard buld of (S)LFS. Its up to the user 
to cater for his future needs. Possible suggestions should be a seperate 
/boot, /home and possibly /var, to face disk space overwhelming from users. 
Guess the magic word is "quota", but partitioning offers better control. More 
to follow (have to dig up some documentation)

-- 
himicos
-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.