Re: /etc protection


From: David Ford <david@blue-labs.org>
Subject: Re: /etc protection
Date: Thu, 23 Aug 2001 16:56:52 -0400

Next Article (by Author): Re: syslog-ng Deim Agoston
Previous Article (by Author): Reduce Travel Costs 13078 Cindy.J@ueonet.com
Top of Thread: Re: /etc protection steve
Articles sorted by: [Date] [Author] [Subject]


Mount will work just fine, use -n.  As a matter of fact, my /etc/mtab is 
a symlink to /proc/mounts as is below and has been that way for a long 
time...and I still haven't gotten around to doing up rsbac ;)

David

Bencsath Boldizsar wrote:

>The biggest problem with the /etc is /etc/mtab. If You can't write it,
>then mount won't work.
>
>So what? Under RC protection If you set special fd type on /etc, you have
>to exclude /etc/mtab from that. This won't work since it will delete this
>file and then recreate, so the special fd attribute is lost.
>If you set the special fd on every file in the /etc dir, hm.. nice job..
>
>So the simplest solution is to remove /etc/mtab, and simply symlink to
>/proc/mounts.
>rm /etc/mtab
>ln -s /proc/mounts /etc/mtab
>
>So if the /etc is read only, the system can start up. Of course you can
>have problems with adjtime and so on, but these are not so critical
>errors.
>b
>



-
To unsubscribe from the rsbac list, send a mail to
majordomo@rsbac.org with
unsubscribe rsbac
as single line in the body.

Next Article (by Author): Re: syslog-ng Deim Agoston
Previous Article (by Author): Reduce Travel Costs 13078 Cindy.J@ueonet.com
Top of Thread: Re: /etc protection steve
Articles sorted by: [Date] [Author] [Subject]


Go to Compuniverse LWGate Home Page.