Re: How efficient is mounting /usr ro?
On Thu, 9 Oct 2003, Bernhard R. Link wrote:
> security one gets by this is that this way /usr has no chance to
> go corrupt when de power supply fails and less possible corruption
Well, no chance from software related issues (files not writing properly,
etc) but an electrical surge could still do in the filesystem.
> make it less propable that a corruption helping an attacker accours.
True.
> On the other hand if you then forget to remount it rw when updating
> packages this may corrupt your system helping an attacker in.
IIRC I did something like this a few years ago and it didn't cause
corruption, it just resulted in the package installation failing.
> On the other hand one should not over-estimate the inteligence of
> script-kiddies. Even those writing the scripts tend to be lousy
> programers, from what I have seen.
Indeed.
Rob
--
Robert Brockway B.Sc. email: robert@timetraveller.org, zzbrock@uqconnect.net
Linux counter project ID #16440 (http://counter.li.org)
"The earth is but one country and mankind its citizens" -Baha'u'llah
Reply to: