Commit Graph

2 Commits

Author SHA1 Message Date
hubertf 71be6dfd96 No devices on /usr -> mount -o nodev
No setuid programs in /var	-> mount -o nodev,nosuid

Adding "noexec" in various places may cause too much damage
(e.g. for running DEINSTALL scripts from /var/db/pkg, configure
scripts, etc).

Inspired by OpenBSD's afterboot(8) manpage.
2005-05-04 18:26:14 +00:00
hubertf 9ee7752f6f Extract commonly used things like CDROMs, pseudo-filesystems (/proc, ...)
and mfs-based /tmp into their own files. Hint at them in the existing
files. (fstab needs an #include statement :)
2005-04-03 14:12:14 +00:00