Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 17 Apr 2006 13:43:49 +0300 (EEST)
From:      Giorgos Keramidas <keramida@ceid.upatras.gr>
To:        Brendan Grossman <brendan@grossman.id.au>
Cc:        freebsd-questions@freebsd.org
Subject:   RE: /boot at beginning of drive
Message-ID:  <20060417134147.Y84667@gothmog>
In-Reply-To: <20060416205147.6544228454@porsche.brendan.id.au>
References:  <20060416205147.6544228454@porsche.brendan.id.au>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2006-04-17 06:21, Brendan Grossman wrote:
>Beech Rintoul [mailto:beech@mangohealth.org] wrote:
>> On Sunday 16 April 2006 12:38, Brendan Grossman wrote:
>>>> It's not a good idea to put everything on the / filesystem.
>>>> At a minimum I would have:
>>>> /
>>>> swap
>>>> /var
>>>> /usr
>>>>
>>>> Your users will not fill up /var unless you allow them unlimited
>>>> mail, databases or access to root.
>>>
>>> They will have unlimited access up until their quota has
>> been reached.
>>> Where they use that quota is anyone's guess.
>>>
>>>> User's tempfiles will go to /usr/tmp.
>>>
>>> How does that work? I just checked /tmp, and it's not a symlink.
>>
>> Copy the contents of /tmp to /usr/tmp then remove /tmp and
>> symlink /usr/tmp to /tmp.
>
> Yes, may I ask what the point is though?
>
> Here is my reason for separating /tmp and mounting it noexec,nosuid:
>
> http://www.sagonet.com/forums/showthread.php?t=2852

You should also take a look at the following rc.conf options then:

     tmpmfs="AUTO"           # Set to YES to always create an mfs /tmp, NO to never
     tmpsize="20m"           # Size of mfs /tmp if created
     tmpmfs_flags="-S -M"    # Extra mdmfs options for the mfs /tmp

If you have enough swap space, there's no need to worry too much about
making a separate /tmp partition.  Just set:

     tmpmfs="YES"
     tmpsize="100m"
     tmpmfs_flags="-S -M -o noexec,nosuid"

Note the -o option in `tmpmfs_flags'.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060417134147.Y84667>