On Fri, May 2, 2008 at 9:38 AM, Ralph Angenendt <ra+centos@xxxxxxxxxxxx> wrote:
> Brett Serkez wrote:
> > On Fri, May 2, 2008 at 12:16 AM, Jason Pyeron <jpyeron@xxxxxxxx> wrote:
> > > I am looking at having a read only box, it will not use a swap partition.
> > > Any recommendations?
> >
> > You'll need to break out your hard drive into multiple partitions, as
> > there are certain portions of the file system that need to be writable
> > such as /var and /home. I setup systems in this manner to make them
> > more difficult to subvert, I'd suggestion searching for topics such as
> > "linux file system hardening".
>
> What do you do with /etc/mtab - where the system clearly wants to write
> into when you mount/unmount stuff?
Make it a soft-link to /var or other writable file system, perhaps
/etc/mtab -> /var/etc/mtab.
For the most part the Linux/UNIX file system is broken up into well
defined areas, but alas, exceptions need to be dealt with.
Brett
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
