From owner-freebsd-doc@FreeBSD.ORG Sun Jun 1 16:20:19 2003 Return-Path: Delivered-To: freebsd-doc@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7B16137B401 for ; Sun, 1 Jun 2003 16:20:19 -0700 (PDT) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1472E43F3F for ; Sun, 1 Jun 2003 16:20:19 -0700 (PDT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.12.9/8.12.9) with ESMTP id h51NKIUp079305 for ; Sun, 1 Jun 2003 16:20:18 -0700 (PDT) (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.12.9/8.12.9/Submit) id h51NKImN079304; Sun, 1 Jun 2003 16:20:18 -0700 (PDT) Date: Sun, 1 Jun 2003 16:20:18 -0700 (PDT) Message-Id: <200306012320.h51NKImN079304@freefall.freebsd.org> To: freebsd-doc@FreeBSD.org From: Brian Minard Subject: Re: docs/52829: [PATCH] Installing FreeBSD: Benefits of multiple filesystems X-BeenThere: freebsd-doc@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Brian Minard List-Id: Documentation project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Jun 2003 23:20:19 -0000 The following reply was made to PR docs/52829; it has been noted by GNATS. From: Brian Minard To: FreeBSD-gnats-submit@FreeBSD.org Cc: Subject: Re: docs/52829: [PATCH] Installing FreeBSD: Benefits of multiple filesystems Date: Sun, 1 Jun 2003 19:03:53 -0400 Use this patch instead. The previous one contains broken tags. --- chapter.sgml.orig Sun Jun 1 18:52:09 2003 +++ chapter.sgml Sun Jun 1 19:00:13 2003 @@ -1747,7 +1747,13 @@ Different filesystems can have different mount options. For example, with careful planning, the root filesystem can be mounted read-only, making it impossible for - you to inadvertently delete or edit a critical file. + you to inadvertently delete or edit a critical file. As well, + separating the filesystem containing /home, + from other filesystems means that user-writable filesystems can be + mounted nosuid. This will prevent the + suid/guid bits on executables stored in + /home from taking effect, possibly improving + security.