Re: devel files and libraries in /lib
On Wed, Jan 05, 2011 at 03:29:08AM +0100, Michael Biebl wrote:
>
> Nice write-up, you raise many good points I agree with.
>
> Just a small remark:
>
> On 05.01.2011 01:25, Roger Leigh wrote:
>
> > 2) /usr is mounted read-only for security and safety
> >
> > Mounting /usr read-only is common practice; I even do this myself
> > with apt-get configured to remount read-write when changes are made
> > and then remount read-only afterwards.
>
> This can easily be achieved using a bind mount, without requiring /usr being a
> separate partition.
>
> mount --bind /usr /usr
> mount -oremount,ro /usr
It requires a recent kernel, though. IIRC, Lenny kernels don't support
readonly bind mounts.
Mike
Reply to: