Salix Forums

Hi,

i want secure my fstab ( chmod 600 ) for Home User Desktop ( with Xfce ) ...

/dev/sda5 / ext4 defaults 1 1
/dev/sda1 /boot ext2 defaults 1 2
/dev/sda6 /var ext4 defaults 1 2
/dev/sda7 /tmp ext4 defaults,nosuid,noexec,nodev 1 2
/dev/sda8 /usr ext4 defaults 1 2
/dev/sda9 /home ext4 defaults 1 2
tmpfs /dev/shm tmpfs defaults,nosuid,noexec,nodev 0 0

I put : nosuid,noexec,nodev in tmpfs and /tmp and work 's fine .

It 's possible for var/tmp or another with no mistake for O.S ?

Thank .

Hi ,

nobody secure /etc/fstab ?

You also have to add it to /home

thenktor wrote:You also have to add it to /home

Hi ,

thanks for your response ...

I use that now : work 's fine ( i think ) .

/dev/sda5 on / type ext4 (rw,errors=remount-ro)
proc on /proc type proc (rw,noexec,nosuid,nodev,relatime)
sysfs on /sys type sysfs (rw,noexec,nosuid,nodev)
/dev/sda1 on /boot type ext2 (ro,noexec,nosuid,nodev)
/dev/sda6 on /usr type ext4 (ro,nodev)
/dev/sda7 on /var type ext4 (rw,noexec,nosuid,nodev)
/dev/sda8 on /tmp type ext4 (rw,noexec,nosuid,nodev)
/dev/sda10 on /home type ext4 (rw,noexec,nosuid,nodev)
tmpfs on /dev/shm type tmpfs (rw,noexec,nosuid,nodev)

A little up for help with :

proc and sys

Because i use : mount -o remount / proc , and mount -o remount /sys
after the boot .

Why it' s no work fine by default with /etc/fstab ?

And it 's possible to do that with Gsalpt ?

my /etc/apt/apt.conf:

DPkg
{
// Auto remount readonly /usr
Pre-Invoke {"mount -o remount,rw /usr";};
Post-Invoke {"mount -o remount,ro /usr";};
}

Thank .

Hi,

nobody ?