Next
Previous
Contents
The general option are not needed most of the time. They allow
for increase flexibility and security.
- Read-only
It is possible to protect a partition from writing. Even
the superuser won't be able to write there. This is seldom
use on normal hard drive partition though.
- user mountable
This option is generally used with the following one. It
is useful for removable media. It allows any one to
activate the connection at any time. Normally, only root
(the superuser) can establish a mount.
- Not mount at boot time
Especially useful for removable media. It prevent the system
from trying to establish a mount (and fail) at boot time.
- No program allowed to execute
It is a security feature, especially useful for removable
media. If you set the
user mountable
option on a
removable media, it allows any user to come and install
a set of files specially setup to give him full access
to your system (administrator privilege).
- No special device file support
This is a security feature.
Special device are generally created with proper access rights
in the /dev directory. They may be created in other place too
with the mknod command. This feature prevent mounting a
media with special device created with relaxed security. Such
devices would defeat all security on the system.
- No setuid programs allowed
Again a security feature. It is a compromise between full
access and the above option (No execution allowed).
By setting this option, the system will deny privileged
program their special rights. A privileged program
is one that switch the user to another identity while
it is running (generally root), allowing this user
to do special tasks only the supervisor can do.
- User quota enabled
This flag tells the kernel to enable quota accounting on the
file system. Quota accounting maintain for each user in real
time the amount of disk space used and the amount of files
and directories they own. Limits may be imposed on some users.
This is controlled filesystem per filesystem. The
files quota.user is created in the root of the
file system (Linuxconf will create it for you if you activate
this feature). The utility
quotacheck is run to initialise the files with the current state
of the filesystems. The kernel from now on will silently update
this per user accounting.
This is useful to prevent a single user from filling the disk...
- Group quota enabled
This is the same feature, but operating group wise. The group quotas
hold the sum of the quota of all file member of the group. A
file quota.group is created when this feature is enabled and the
utility quotacheck is used to initialise the file.
While a user may be under personnal quota limit, the quota of his
group may be over limit. The user will be prevented from creating
new files and/or growing them.
Next
Previous
Contents