Deny remount

Submit your RBAC policies or suggest policy improvements

Deny remount

Postby gorillabas » Mon Jul 25, 2005 1:32 pm

Hi there ,

I have a partition (/export) mounted read only on boot and I want to prevent to be remounted in any way even if let's say someone became root by running an exploit. On the other hand I don't want to restrict the mount command to much because I use this to do backups on dvd.
Thanks a lot !

Jillian.

P.S This is my fstab entry
/dev/md2 on /export type ext3 (ro,noexec,nosuid,nodev)
gorillabas
 
Posts: 1
Joined: Mon Jul 25, 2005 1:23 pm

Return to RBAC policy development

cron