Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 4 Jun 2013 23:59:07 +0200
From:      Eitan Adler <eadler@freebsd.org>
To:        Tom Rhodes <trhodes@freebsd.org>
Cc:        svn-doc-projects@freebsd.org, doc-committers@freebsd.org
Subject:   Re: svn commit: r41839 - projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/basics
Message-ID:  <CAF6rxg==Ad3VnC4Xm5L7-YLTZzR1DQteGH79P%2Bjv3rzqw7kJqQ@mail.gmail.com>
In-Reply-To: <201306042142.r54Lg8g8085573@svn.freebsd.org>
References:  <201306042142.r54Lg8g8085573@svn.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 4 June 2013 23:42, Tom Rhodes <trhodes@freebsd.org> wrote:
> Author: trhodes
> Date: Tue Jun  4 21:42:07 2013
> New Revision: 41839
> URL: http://svnweb.freebsd.org/changeset/doc/41839
>
> Log:
>   Reword the noexec option on this version of the basics
>   chapter.
>
> Modified:
>   projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/basics/chapter.xml
>
> Modified: projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/basics/chapter.xml
> ==============================================================================
> --- projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/basics/chapter.xml       Tue Jun  4 20:42:37 2013        (r41838)
> +++ projects/ISBN_1-57176-407-0/en_US.ISO8859-1/books/handbook/basics/chapter.xml       Tue Jun  4 21:42:07 2013        (r41839)
> @@ -1800,7 +1800,9 @@ root     5211  0.0  0.2  3620  1724   2
>
>           <listitem>
>             <para>Do not allow execution of binaries on this file
> -             system.  This is also a useful security option.</para>
> +             system.  This option should not be the only security
> +             control placed on a file system as scripts written in
> +             any language may still execute.</para>

I would remove the language "the only security control" as this
implies that 'noexec' has a non-zero security value.

Perhaps "Do not allow execution of binaries on this file system.  This
helps reduce annoyance to the user when storing binaries of non-native
architectures" or the like.


-- 
Eitan Adler
Source, Ports, Doc committer
Bugmeister, Ports Security teams



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAF6rxg==Ad3VnC4Xm5L7-YLTZzR1DQteGH79P%2Bjv3rzqw7kJqQ>