Re: Good fdisk Practices

[Jamin Davis <jweb@ghost.merseine.nu>]

David Brodbeck <brodbd@u.washington.edu> wrote:

>> There may be good reason for it still in terms of security.  /boot
>> doesn't need to be mounted on a running system.  I'm not sure if that
>> adds a lot of security though.
> I'm thinking no.  To alter any of the kernel files you'd need root
> privileges, and if you have that, you can do 'mount /boot'.

I read an installation doc a long time ago that suggested mounting boot
read-only for security - have done so ever since. It's not every day I need
to update the kernel.

-- 
Jamin @ Home: Chester UK -<jamin@ghost.merseine.nu>