Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

So mount options can be useful because it can afaik increase the security of a webserver that is only serving static html files.

What are the best mount options/partition schemes for az OpenBSD 5.2 that is used only for static HTTPD server?

share|improve this question

1 Answer 1

up vote 5 down vote accepted
+50

If security is your concern, keep in mind that httpd in OpenBSD is chrooted by default, which means that in case of a potential compromise of your web server, the attacker will stay in the chroot jail of your webserver, isolated from the rest of your system, therefore minimizing the effects of the breach.

As far as mount options go, you could mount the partitions where binaries are not expected to be executed as noexec (for example, user /home directories). You could also consider enabling nosuid and nodev mount options where applicable. Check the mount manual page for more information.

You could also use a restricted shell such as rbash in conjunction with chroot jailing of daemons.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.