[1485] in linux-security and linux-alert archive
[linux-security] Re: [linux-alert] More sendmail problems... Partition your disks!
daemon@ATHENA.MIT.EDU (Steve \"Stevers!\" Coile)
Mon Mar 24 15:57:16 1997
Date: Mon, 24 Mar 1997 14:33:02 -0500 (EST)
From: "Steve \"Stevers!\" Coile" <scoile@patriot.net>
To: linux-security@redhat.com
In-Reply-To: <199703241904.OAA18962@ding.mailhub.com>
Resent-From: linux-security@redhat.com
Reply-To: linux-security@redhat.com
[Mod: redirected to linux-security --alex]
On Mon, 24 Mar 1997, Alexander O. Yuriev wrote:
>This is yet-another reason to _partition_ your disks. Of course hard links
>do not work accross filesystems. Even thought it is a pain in the neck to do
>when installing your operating system, think about separating critical
>system files from non-critical and non-system files from system files. I
>would say that the following layout is a good place to start:
[...]
> /tmp (nosuid,noexec,nodev)
> /var (nosuid,noexec,nodev)
Red Hat Linux, at least, won't like this, as the Red Hat Package Manager,
"rpm", builds scripts in and attempts to execute scripts out of /tmp. =(
--
Steve Coile P a t r i o t N e t Systems Engineering
scoile@patriot.net Patriot Computer Group (703) 277-7737
