From owner-freebsd-stable Thu May 31 8: 0:49 2001 Delivered-To: freebsd-stable@freebsd.org Received: from dazed.slacker.com (dazed.slacker.com [64.81.115.65]) by hub.freebsd.org (Postfix) with SMTP id 60A1D37B422 for ; Thu, 31 May 2001 08:00:46 -0700 (PDT) (envelope-from nugget@dazed.slacker.com) Received: (qmail 63310 invoked by uid 1000); 31 May 2001 15:00:45 -0000 Date: Thu, 31 May 2001 10:00:45 -0500 From: David McNett To: freebsd-stable@freebsd.org Subject: Re: adding "noschg" to ssh and friends Message-ID: <20010531100045.B58004@dazed.slacker.com> References: <15124.4635.887375.682204@onceler.kciLink.com> <20010529145609.A1209@xor.obsecurity.org> <15124.7132.963202.560009@onceler.kciLink.com> <200105292211.f4TMBpB30316@earth.backplane.com> <20010529183239.B14308@psychotic.aberrant.org> <20010530211444.A40244@mail.webmonster.de> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="/NkBOFFp2J2Af1nK" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010530211444.A40244@mail.webmonster.de>; from karsten@rohrbach.de on Wed, May 30, 2001 at 09:14:44PM +0200 X-Operating-System: FreeBSD 4.3-STABLE i386 X-Distributed: Join the Effort! http://www.distributed.net/ Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG --/NkBOFFp2J2Af1nK Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 30-May-2001, Karsten W. Rohrbach wrote: > there are some real high-impact tweaks to be a little bit safer from > rootkits. one of them is mounting /tmp noexec. drawback: you got to > remount it exec for make installworld. An alternate approach (which I use) is: # make TMPDIR=3D/some/other/dir installworld --=20 ________________________________________________________________________ |David McNett |To ensure privacy and data integrity this message has| |nugget@slacker.com|been encrypted using dual rounds of ROT-13 encryption| |Austin, TX USA |Please encrypt all important correspondence with PGP!| --/NkBOFFp2J2Af1nK Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: http://members.slacker.com/~nugget/ iD8DBQE7Flyds3nEpeQ8X8MRAh5rAKC0Q0mtQCYnRpML7K3E1Cp8TIV0+gCeJzpC m5BgCZiuLGAOTEWY+/LGiDc= =A/y8 -----END PGP SIGNATURE----- --/NkBOFFp2J2Af1nK-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message