Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 28 Dec 1999 11:19:42 -0800 (PST)
From:      "Brian W. Buchanan" <brian@CSUA.Berkeley.EDU>
To:        Spidey <beaupran@iro.umontreal.ca>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: Mounting / Read-Only
Message-ID:  <Pine.BSF.4.10.9912281117240.46739-100000@smarter.than.nu>
In-Reply-To: <14441.2683.366094.187063@anarcat.dyndns.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 28 Dec 1999, Spidey wrote:

> I was also wondering... If we can modify the status (RW/RO) of a
> mounted filesystem (/ included) with mount -u, why bother? :))
> 
> What is the purpose of mounting a filesystem ReadOnly, since it can be
> disabled? Does it serve the same function as the schg flag? I think
> the securelevel does not change this behavior, right?

Mounting a filesystem read-only is not a security measure.  It gains you
nothing if root is compromised.

-- 
Brian Buchanan                                     brian@CSUA.Berkeley.EDU
--------------------------------------------------------------------------
FreeBSD - The Power to Serve!                       http://www.freebsd.org



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.9912281117240.46739-100000>