Just Copy oaste.. :(
Learn some of the basic steps you can take to make your FreeBSD system more secure.1. set additional flags on your /tmp and /home directories. I will show you how to see your current flags and how to change them[root]# mount/dev/ad0s1a on / (ufs, local)/dev/ad0s1f on /tmp (ufs, local, nodev, nosuid, soft-updates)/dev/ad0s1g on /usr (ufs, local, soft-updates)/dev/ad0s1e on /var (ufs, local, soft-updates)/dev/ad0s1h on /home (ufs, local, nosuid, with quotas, soft-updates)procfs on /proc (procfs, local)The two partitions above are the ones we will be adding flags for. As you can see I added nodev and nosuid on /tmp and nosuid and quotas on /homenodev – stops character or block special devices on the filesystemnosuid – disables suid programs from being run from this filesystemquotas – to limit the amount of disk space that your users may useYou can set these flags in /etc/fstab filethe /tmp directory is a world writable directory [...]
Read original post at ainoer blog
Related posts:
Wikusama (noun) : nick community alumni [1] widyaloka kusuma samekta makarya [2] tempat mencari ilmu yang bersinar, harum, mewangi, yang mendidik dan menyiapkan sumber daya manusia agar siap terjun ke dunia kerja [3] ikatan alumni smk telekomunikasi sandhy putra malang [4] tidak mengenal batas generasi dan umur; mailing-list [1] wikusama@wikusama.com
Latest Comments