On Mon, 2005-09-26 at 11:48 -0400, Bradley Alexander wrote: > You mentioned a "home" computer. I have more than one system in my home that > are multiuser, which kicks in security rules. Personally, I have four rules > for partitioning securely. Rules 1 and 2 grew out of the days when filling / > would kill the machine. Rule 3 came from my use of RdHat :). I create a > separate partition for: > > * any filesystem a user can write to directly (e.g. /home, /tmp) > * any filesystem a user can write to indirectly (e.g. /var) > * any filesystem you want to save the information on (e.g. /usr/local, /opt) > > I am an LVM fan too. Its too easy that any box I build (including laptops) > uses LVM. Mr. Alexander, you have nailed the definition for me. I have been doing that for many a year. Except /usr/local and /opt grew from what used to be /usr for me. Too many problems were accredited to the fact that users had the homedirs in /usr. My first nice HP9000 (a very early 817) had all the users locate in /usr/users/<homedir>. That is the way it came from HP! I was never able to get things right until I re-installed the whole she-bang from my bootable DDS tape. I gave the Mapics install /opt/mapics/ and the netscape webserver /usr/local/netscape/ and the users /u/<homedir> and also allowed me to get /tmp off the root filesystem. As I had a few times where Mapics would fill up the /tmp space (and the rootfs). But I thank you for your input! -- greg, greg@gregfolkert.net The technology that is Stronger, Better, Faster: Linux Use Debian GNU/Linux, its a bazaar thing.
Attachment:
signature.asc
Description: This is a digitally signed message part