full-disclosure - Re: Most Linux distributions don't use tmpfs nor encrypt swap by default

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sun, 15 Apr 2012 05:47:11 -0600
From: _ <packetnull@...il.com>
To: Feighen Oosterbroek <feighen@...il.com>
Cc: "full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>
Subject: Re: Most Linux distributions don't use tmpfs nor
	encrypt swap by default

Interesting to know how free and net do encrypted swap as well. I know OpenBSD has an encrypt swapfs setting on its rc.conf file though not activated by default.



On Apr 13, 2012, at 5:59 AM, Feighen Oosterbroek <feighen@...il.com> wrote:

> Hi Mark
> 
> I was interested in some of your BSD results. From what I remember of
> the freebsd install it left all disk layout issues to the person
> installing. Admittedly that was a few releases ago (6 branch mainly).
> Has the install changed that much that it now recommends a disk
> layout?
> 
> Thanks and kind regards
> Feighen
> 
> On 13 April 2012 05:05, Mark Krenz <mark@...o.com> wrote:
>> On Thu, Apr 12, 2012 at 10:53:47PM GMT, Grandma Eubanks [tborland1@...il.com] said the following:
>>> Fedora Core 15:
>>> 
>>> /dev/mapper/vg_youwish-lv_swap swap                    swap
>>> defaults        0 0
>>> tmpfs                 /tmp                    tmpfs   defaults        0 0
>>> 
>>> Removed other options it should have, but defaults do not include
>>> nosuid,nodev,noexec.
>> 
>>  You obviously customized the install or changed it post installation as
>> this is not the default way it gets setup.  Below is the filesystem
>> setup when using all the default options (no customization):
>> 
>> # df -hP
>> Filesystem            Size  Used Avail Use% Mounted on
>> rootfs                5.5G  2.1G  3.4G  39% /
>> udev                  495M     0  495M   0% /dev
>> tmpfs                 502M  272K  501M   1% /dev/shm
>> tmpfs                 502M  612K  501M   1% /run
>> /dev/mapper/vg_fedora15test-lv_root  5.5G  2.1G  3.4G  39% /
>> tmpfs                 502M     0  502M   0% /sys/fs/cgroup
>> tmpfs                 502M     0  502M   0% /media
>> /dev/sda1             485M   30M  430M   7% /boot
>> /dev/mapper/vg_fedora15test-lv_root  5.5G  2.1G  3.4G  39% /tmp
>> /dev/mapper/vg_fedora15test-lv_root  5.5G  2.1G  3.4G  39% /var/tmp
>> /dev/mapper/vg_fedora15test-lv_root  5.5G  2.1G  3.4G  39% /home
>> 
>> Despite what the above looks like, /tmp is actually part of the root
>> filesystem.
>> 
>> Yes, of course you can change your setup post install or if you're
>> daring enough during the install, but that wasn't the point of the
>> research.
>> 
>> 
>> --
>> Mark S. Krenz
>> IT Director
>> Suso Technology Services, Inc.
>> 
>> Sent from Mutt using Linux
>> 
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> Hosted and sponsored by Secunia - http://secunia.com/
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/