Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 26 May 1995 13:21:34 -0400
From:      Garrett Wollman <wollman@halloran-eldar.lcs.mit.edu>
To:        Javier Martin Rueda <jmrueda@diatel.upm.es>
Cc:        questions@FreeBSD.org
Subject:   Which files should have append-only and immutable flags?
Message-ID:  <9505261721.AA02678@halloran-eldar.lcs.mit.edu>
In-Reply-To: <706*/S=jmrueda/OU=diatel/O=upm/PRMD=iris/ADMD=mensatex/C=es/@MHS>
References:  <706*/S=jmrueda/OU=diatel/O=upm/PRMD=iris/ADMD=mensatex/C=es/@MHS>

next in thread | previous in thread | raw e-mail | index | archive | help
<<On Fri, 26 May 1995 11:53:55 UTC+0200, Javier Martin Rueda <jmrueda@diatel.upm.es> said:

> After a quick thinking, it seems that probably the following directories and
> all the files inside should be immutable, as they are not supposed to change
> in the operating system's lifetime:

> /sbin, /usr/sbin, /bin, /usr/bin, /usr/lib, /usr/X11R6/bin, /usr/X11R6/lib

The apparent intent, so far as I can determine from what Berkeley
shipped, is that the system immutable flag should only be set on those
binaries which are necessary to get the system up far enough to
restore from a local backup, and those that are security-sensitive.

-GAWollman

--
Garrett A. Wollman   | Shashish is simple, it's discreet, it's brief. ... 
wollman@lcs.mit.edu  | Shashish is the bonding of hearts in spite of distance.
Opinions not those of| It is a bond more powerful than absence.  We like people
MIT, LCS, ANA, or NSA| who like Shashish.  - Claude McKenzie + Florent Vollant



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9505261721.AA02678>