Re: Do we care about /sbin /bin linked to /usr/lib ?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Once upon a time, Bill Crawford <billcrawford1970@xxxxxxxxx> said:
> Long term, I'll admit that getting rid of separate /usr may be a good idea, 
> Solaris appears to have done away with it a while ago (which surprised me, 
> since they used to make explicit provision for having shared /usr in their 
> package management system).

I use a separate (but not shared) /usr on my servers, and I mount it
read-only.  My reasoning is that / has to be read-write still for some
things (root's home directory, /etc/passwd and /etc/shadow, etc.).  I
keep a small / that is read-write, but having a good chunk of the
installed stuff in /usr mounted read-only makes it a little "safer"
(i.e. an attacker would have to remount it to modify it, filesystem
corruption is unlikely on a read-only FS, etc.).

-- 
Chris Adams <cmadams@xxxxxxxxxx>
Systems and Network Administrator - HiWAAY Internet Services
I don't speak for anybody but myself - that's enough trouble.

-- 
fedora-devel-list mailing list
fedora-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-devel-list

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux