From owner-freebsd-questions@FreeBSD.ORG Tue Aug 1 12:18:44 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1BC3416A4DA for ; Tue, 1 Aug 2006 12:18:44 +0000 (UTC) (envelope-from freminlins@gmail.com) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.189]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2D4EE43D4C for ; Tue, 1 Aug 2006 12:18:30 +0000 (GMT) (envelope-from freminlins@gmail.com) Received: by nf-out-0910.google.com with SMTP id n29so250807nfc for ; Tue, 01 Aug 2006 05:18:30 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=kGJgT6xkT5MKs2QLXz14UKFTooJMOrFm6e5nbYpjyLPdV8bUtCNUGu5jfnl6XQ8uOOA4S8azxuQAwHIDp7Vo4sgPHVibpuOU2nr8tVS2wis6TsosCA/n6b7tyy5F4h58gNd9msGew7D65VfKVfjxrsll+Du2POt2IcTL4iR4dZM= Received: by 10.49.8.10 with SMTP id l10mr560618nfi; Tue, 01 Aug 2006 05:18:30 -0700 (PDT) Received: by 10.48.208.6 with HTTP; Tue, 1 Aug 2006 05:18:29 -0700 (PDT) Message-ID: Date: Tue, 1 Aug 2006 13:18:29 +0100 From: Freminlins To: "Erik Norgaard" In-Reply-To: <44CEF9EB.3080807@locolomo.org> MIME-Version: 1.0 References: <20060801053719.GA6735@fast> <44CEF9EB.3080807@locolomo.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: freebsd-questions@freebsd.org, Tyler Spivey Subject: Re: switching from linux to freebsd X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Aug 2006 12:18:44 -0000 On 01/08/06, Erik Norgaard wrote: you may > even want to mount it read-only for security. (I think these are good > advises on any system). I used to agree with this (specifically the mantra was "mount /usr read only") - until I tried to patch anything! Then it's useless. What you end up with is a machine which in which the base install is more secure, but all your data isn't. The base install is the one thing I know I can get back (i.e. reinstall) in 5 minutes. The data I cannot. Cheers, Erik > Frem.