Bug 52829

Summary: [PATCH] Installing FreeBSD: Benefits of multiple filesystems
Product: Documentation Reporter: Brian Minard <bminard>
Component: Books & ArticlesAssignee: Ceri Davies <ceri>
Status: Closed FIXED    
Severity: Affects Only Me    
Priority: Normal    
Version: Latest   
Hardware: Any   
OS: Any   
Attachments:
Description Flags
file.diff none

Description Brian Minard 2003-06-01 03:00:29 UTC 
	The installation chapter lists several benefits for creating multiple
	filesystems.  An important consideration which might not be apparent
	to new users until after they complete the installation is that you
	cannot mount user-writable file systems nosuid if you don't put them
	in a separate filesystem.  This is worth emphasizing, as security(7)
	makes this recommendation.

How-To-Repeat: 	Follow the installation instructions for allocating disk space--they
	are (strongly) biased towards leading users to create /home under /usr.
Comment 1 Brian Minard 2003-06-02 00:03:53 UTC 
Use this patch instead.  The previous one contains broken tags.

--- chapter.sgml.orig	Sun Jun  1 18:52:09 2003
+++ chapter.sgml	Sun Jun  1 19:00:13 2003
@@ -1747,7 +1747,13 @@
 	  <para>Different filesystems can have different <firstterm>mount
 	      options</firstterm>.  For example, with careful planning, the
 	    root filesystem can be mounted read-only, making it impossible for
-	    you to inadvertently delete or edit a critical file.</para>
+	    you to inadvertently delete or edit a critical file.  As well,
+	    separating the filesystem containing <filename>/home</filename>,
+	    from other filesystems means that user-writable filesystems can be
+	    mounted <firstterm>nosuid</firstterm>.  This will prevent the
+	    <firstterm>suid/guid</firstterm> bits on executables stored in
+	    <filename>/home</filename> from taking effect, possibly improving
+	    security.</para>
 	</listitem>
 
 	<listitem>
Comment 2 Ceri Davies freebsd_committer freebsd_triage 2003-06-03 00:30:31 UTC 
Responsible Changed
From-To: freebsd-doc->ceri

I'll make sure this gets looked at.
Comment 3 Ceri Davies freebsd_committer freebsd_triage 2003-06-07 16:54:44 UTC 
State Changed
From-To: open->closed

I committed a slightly different version of your text; thanks for the 
submission.