From: JingYuan Chen <phil.cyc@gmail.com>
To: gentoo-user@lists.gentoo.org
Subject: Re: [gentoo-user] Re: DRM Problem : Radeon HD 7670M
Date: Thu, 5 May 2016 18:22:14 +0800 [thread overview]
Message-ID: <CA+7LKP=AYEW2muirYQE-akvLMZRLJ0AnsD3PRyg-2xd3aMrOnw@mail.gmail.com> (raw)
In-Reply-To: <loom.20160504T194336-46@post.gmane.org>
[-- Attachment #1: Type: text/plain, Size: 1443 bytes --]
When grub or new kernel was installed in boot partition, their permission
can be determined by umask.
Why set boot partition as noauto or ro in fstab ? What's the advantage ?
On May 5, 2016 1:46 AM, "James" <wireless@tampabay.rr.com> wrote:
> Neil Bothwick <neil <at> digimed.co.uk> writes:
>
>
> > > Therefore, I check the configuration of grub2 and fstab. Then I found
> > > that I forgot to modify mount options in fstab.
> > > The option of my boot partition was set as noauto. So that I don't use
> > > the kernel compiled by myself at all.
>
> > We've all done that. Now I mount /boot as ro in fstab. That way, if I
> > forget to remount it before installing a kernel I get an error message
> > instead of the kernel just disappearing.
>
>
>
> Perhaps a documentation bug should be filed against the handbook or other
> gentoo doc explaining some of the security and other approaches
> and *why* various approaches are used with mounting strategies for /boot/
> is
> warranted?
>
> That way, if folks miss it, we can just refer them to the docs and
> elaborate
> a bit. Me, I like to keep lots of kernels around for a variety
> of reasons. Maybe in the GSoC effort (Kernelconfig) is a better place to
> implement some explanation on the choices of what to do with /boot/ ? [1]
>
>
> Anyway, I'm glad to hear that all is fine now.
>
> James
>
>
> [1]
> https://wiki.gentoo.org/wiki/Google_Summer_of_Code/2016/Ideas/kernelconfig
>
>
>
>
[-- Attachment #2: Type: text/html, Size: 2072 bytes --]
next prev parent reply other threads:[~2016-05-05 10:22 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <CA+7LKPmWVvZBRtxwB55q-cQn-6+=oZ2EZnx6+_air25wauMu5A@mail.gmail.com>
[not found] ` <CA+7LKP=bRETc2uoy6df6uc1dpHr9L3Tg1E+S2Or1KLm5SPYLJg@mail.gmail.com>
[not found] ` <CA+7LKP=fNSt8KkM5OTvf+22=j74fx09t0XpMXCGNJJqzneFb_g@mail.gmail.com>
[not found] ` <CA+7LKP=Mc2d9zYWr52Z6qEO5=YcuB9ZnQxwQYdeRRjov7z1kgQ@mail.gmail.com>
[not found] ` <CA+7LKPnkF=eP3ewYZcOq9yTCFTAbAtj8b2wQDgmOO2tSq8a8wA@mail.gmail.com>
[not found] ` <CA+7LKP=f9tujG5WHi_LWFDgpJwjZgggW=_VZFdC0QvWBAEH8Fg@mail.gmail.com>
[not found] ` <CA+7LKP=mXYu=+zcYAJagbbbGNJbs4m58GKQoWu-qmZ-e2V4EgA@mail.gmail.com>
[not found] ` <CA+7LKPkepfPZ851hu_rV1FjnVuK2t9FfcAWVvxMZ-ZZP3muUzg@mail.gmail.com>
[not found] ` <CA+7LKPnMwWp8z4dA2pY6MdqMkN6VZZtx81OLr61p19z8=YkC+g@mail.gmail.com>
[not found] ` <CA+7LKPn3HYZdFgSFtLDDMUkMCGHJGEWOD4Zup__3aQ=Hyp4cQw@mail.gmail.com>
[not found] ` <CA+7LKPnCPqU6NvhzYr6rX1h+2YQ2KCuPheqrpCtsNKz6JoOD8Q@mail.gmail.com>
2016-03-26 16:23 ` [gentoo-user] DRM Problem : Radeon HD 7670M JingYuan Chen
2016-03-26 16:47 ` Mick
2016-03-29 1:08 ` JingYuan Chen
2016-03-26 17:06 ` [gentoo-user] " James
2016-03-29 1:32 ` JingYuan Chen
2016-05-04 5:06 ` JingYuan Chen
2016-05-04 5:47 ` Mick
2016-05-04 7:25 ` Neil Bothwick
2016-05-04 17:44 ` James
2016-05-05 10:22 ` JingYuan Chen [this message]
2016-05-05 10:40 ` Alan McKinnon
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='CA+7LKP=AYEW2muirYQE-akvLMZRLJ0AnsD3PRyg-2xd3aMrOnw@mail.gmail.com' \
--to=phil.cyc@gmail.com \
--cc=gentoo-user@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox