Re: securety related question...

* Bill maltby - LFS Related <[email protected]> [2002-10-06 10:32]:
> 
> I do this on my LFS installs for chapters 6 - (almost) 9. I do it to avoid
> copy of sources (saving space) while still allowing sources to be avail-
> able inside chroot to $LFS. Further, I do the mount as read only, thereby
> safegaurding the sources from accidental corruption by any of the root
> activities inside the $LFS jail. No problem, no noticed performance
> issues.
> 
Could you check that you can bind a rw device ro? I read somewhere
that there was a patch to keep separate mount flags for each mount,
but it does not appear to be there yet:

[root@urusai root]# mount --version; uname -a
mount: mount-2.11u
Linux urusai.localnet.rcl 2.4.20-pre8 #1 Thu Oct 3 07:52:50 BST 2002 i686 unknown
[root@urusai root]# mount -o ro --bind /tmp /floppy
[root@urusai root]# ls /tmp
[root@urusai root]# touch /floppy/x
[root@urusai root]# ls /tmp
x
[root@urusai root]# grep ^tmp /proc/mounts
tmp /tmp tmpfs rw,nosuid,nodev,noexec 0 0
tmp /floppy tmpfs rw,nosuid,nodev,noexec 0 0
[root@urusai root]#

Richard
-- 
Unsubscribe: send email to [email protected]
and put 'unsubscribe lfs-security' in the subject header of the message