Re: CVS commit: src/share/examples/fstab

[Klaus Klein <kleink%mibh.de@localhost>]

On Wednesday, 4. May 2005 20:26, Hubert Feyrer wrote:
> 
> Module Name:  src
> Committed By: hubertf
> Date:         Wed May  4 18:26:14 UTC 2005
> 
> Modified Files:
>       src/share/examples/fstab: fstab.cdrom fstab.nfs.1 fstab.ra
>           fstab.ramdisk fstab.rd fstab.sd0.1 fstab.sd0.2 fstab.sd0.amiga
>           fstab.sd0.atari fstab.wd0.2 fstab.wd0.3 fstab.wd0.cobalt
> 
> Log Message:
> No devices on /usr            -> mount -o nodev
> No setuid programs in /var    -> mount -o nodev,nosuid
> 
> Adding "noexec" in various places may cause too much damage
> (e.g. for running DEINSTALL scripts from /var/db/pkg, configure
> scripts, etc).

You mean "damage" as in no device nodes being available to
daemons chrooted to /var/chroot, which is the setup we happen
to recommend?  At the very least this deserves a comment about
the consequences.


- Klaus