serenity/Base/etc/fstab

# Root file system. This is a fake entry which gets ignored by `mount -a`;
# the actual logic for mounting root is in the kernel.
/dev/hda	/	ext2	nodev,nosuid,ro
# Remount /bin, /root, and /home while adding the appropriate permissions.
/bin	/bin	bind	bind,nodev,ro
/etc	/etc	bind	bind,nodev,nosuid
/home	/home	bind	bind,nodev,nosuid
/root	/root	bind	bind,nodev,nosuid
/var	/var	bind	bind,nodev,nosuid
/www	/www	bind	bind,nodev,nosuid
/usr/Tests	/usr/Tests	bind	bind,nodev,ro
/usr/local	/usr/local	bind	bind,nodev,nosuid
/usr/Ports	/usr/Ports	bind	bind,nodev,nosuid
Kernel+Base: Mount root as nodev,nosuid Then bind-mount /dev and /bin while adding back the appropriate permissions :^) 2020-01-12 16:40:50 +00:00			# Root file system. This is a fake entry which gets ignored by `mount -a`;
			`# the actual logic for mounting root is in the kernel.`
Kernel+Base: Mount root filesystem read-only :^) We remount /home and /root as read-write, to keep the ability to modify files there. /tmp remains read-write, as it is mounted from a TmpFS. 2020-05-28 15:06:13 +00:00			`/dev/hda / ext2 nodev,nosuid,ro`
Kernel: Introduce the DevFS The DevFS along with DevPtsFS give a complete solution for populating device nodes in /dev. The main purpose of DevFS is to eliminate the need of device nodes generation when building the system. Later on, DevFS will assist with exposing disk partition nodes. 2020-12-25 17:26:38 +00:00			`# Remount /bin, /root, and /home while adding the appropriate permissions.`
Kernel+Base: Mount root filesystem read-only :^) We remount /home and /root as read-write, to keep the ability to modify files there. /tmp remains read-write, as it is mounted from a TmpFS. 2020-05-28 15:06:13 +00:00			`/bin /bin bind bind,nodev,ro`
Base: Mount /etc as read/write Let's be reasonable and have a writable /etc by default. 2020-07-28 17:07:01 +00:00			`/etc /etc bind bind,nodev,nosuid`
Kernel+Base: Mount root filesystem read-only :^) We remount /home and /root as read-write, to keep the ability to modify files there. /tmp remains read-write, as it is mounted from a TmpFS. 2020-05-28 15:06:13 +00:00			`/home /home bind bind,nodev,nosuid`
			`/root /root bind bind,nodev,nosuid`
utmpupdate: Add a program for updating /var/run/utmp To keep track of ongoing terminal sessions, we now have a sort-of traditional /var/run/utmp file, like other Unix systems. Unlike other Unix systems however, ours is of course JSON. :^) The /bin/utmpupdate program is used to update the file, which is not writable by regular user accounts. This helper program is set-GID "utmp". 2020-09-06 14:10:27 +00:00			`/var /var bind bind,nodev,nosuid`
Base: Make /www read-write by default Since it is owned by root anyway, there is no need for 'additional security' to prevent modification of that directory. This makes it easier to quickly export files from Serenity. Fixes #5152. 2021-01-29 18:54:35 +00:00			`/www /www bind bind,nodev,nosuid`
Base: Make /usr/Tests read-only since it's now suid capable Commit cf0dbc906 recently added the ability for setuid binaries to be located in /usr/Tests. This should really now be read only to mitigate the potential misuse of any of the setuid binaries. 2021-10-24 06:08:27 +00:00			`/usr/Tests /usr/Tests bind bind,nodev,ro`
Base+Meta: Make /usr/local read-write This directory has to be writable if we want to install ports that have been built inside Serenity. It's owned by root anyway, so having it be read-only does not provide many security benefits. 2022-02-25 19:45:29 +00:00			`/usr/local /usr/local bind bind,nodev,nosuid`
Base: Add bind-mount for /usr/Ports/ to make it writable This directory is only writable by root already by now. This will allow the upcoming package manager to change files in this directory. 2023-04-15 14:02:18 +00:00			`/usr/Ports /usr/Ports bind bind,nodev,nosuid`
Kernel+Base: Mount root as nodev,nosuid Then bind-mount /dev and /bin while adding back the appropriate permissions :^) 2020-01-12 16:40:50 +00:00