full-disclosure - Re: Most Linux distributions don't use tmpfs nor encrypt swap by default

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAOvuuAXtLGBX=uV6=ahkjTqnv8Ow+ZmtMich_J=DUXu33wBM0g@mail.gmail.com>
Date: Fri, 13 Apr 2012 13:59:35 +0200
From: Feighen Oosterbroek <feighen@...il.com>
To: Mark Krenz <mark@...o.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Most Linux distributions don't use tmpfs nor
 encrypt swap by default

Hi Mark

I was interested in some of your BSD results. From what I remember of
the freebsd install it left all disk layout issues to the person
installing. Admittedly that was a few releases ago (6 branch mainly).
Has the install changed that much that it now recommends a disk
layout?

Thanks and kind regards
Feighen

On 13 April 2012 05:05, Mark Krenz <mark@...o.com> wrote:
> On Thu, Apr 12, 2012 at 10:53:47PM GMT, Grandma Eubanks [tborland1@...il.com] said the following:
>> Fedora Core 15:
>>
>> /dev/mapper/vg_youwish-lv_swap swap                    swap
>> defaults        0 0
>> tmpfs                 /tmp                    tmpfs   defaults        0 0
>>
>> Removed other options it should have, but defaults do not include
>> nosuid,nodev,noexec.
>
>  You obviously customized the install or changed it post installation as
> this is not the default way it gets setup.  Below is the filesystem
> setup when using all the default options (no customization):
>
> # df -hP
> Filesystem            Size  Used Avail Use% Mounted on
> rootfs                5.5G  2.1G  3.4G  39% /
> udev                  495M     0  495M   0% /dev
> tmpfs                 502M  272K  501M   1% /dev/shm
> tmpfs                 502M  612K  501M   1% /run
> /dev/mapper/vg_fedora15test-lv_root  5.5G  2.1G  3.4G  39% /
> tmpfs                 502M     0  502M   0% /sys/fs/cgroup
> tmpfs                 502M     0  502M   0% /media
> /dev/sda1             485M   30M  430M   7% /boot
> /dev/mapper/vg_fedora15test-lv_root  5.5G  2.1G  3.4G  39% /tmp
> /dev/mapper/vg_fedora15test-lv_root  5.5G  2.1G  3.4G  39% /var/tmp
> /dev/mapper/vg_fedora15test-lv_root  5.5G  2.1G  3.4G  39% /home
>
> Despite what the above looks like, /tmp is actually part of the root
> filesystem.
>
> Yes, of course you can change your setup post install or if you're
> daring enough during the install, but that wasn't the point of the
> research.
>
>
> --
> Mark S. Krenz
> IT Director
> Suso Technology Services, Inc.
>
> Sent from Mutt using Linux
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/