Subject: r/o filesystem restrictions for firewall?
To: None <port-sparc@netbsd.org, netbsd-help@netbsd.org>
From: Jon Lindgren <jlindgren@slk.com>
List: port-sparc
Date: 10/23/2000 12:26:07
I finally have a spare sparc to use as a true firewall. I'm planning to
burn a CD for this sucker to boot from. I don't want it to have local
mass storage (besides the cd...).
I've been looking around at regular processes which run and require
temporary files, such as the daily security items, etc... I figure I can
knock syslog stuff to a remote machine, I'll be disabling mail and other
audit scripts (hmmm....), but what about items such as /var/log/wtmp and
such?
So the 1e6 dollar question is: does anyone have any ideas what other
subsystems may be affected by having a r/o local filesystem when running
multiuser? I've been able to experiment for a few hours or so, but I've
not run the thing for months yet...
Any ideas, tips, etc... are well appreciated.
-Jon
--------------------------------------------------------------------
"Trout are freshwater fish, and have underwater weapons."
"Zing, zing zing zing!"
"Keep away from the trout."
-- The opinions expressed are not necesarily those of my employer --
-- Come to think of it, they aren't necesarily mine, either --
"Who stole my lawn?"