Christian Sch�fer wrote:
I wonder what would be the best partition layout for a really secure
and performant system (running as router/server).

current layout:
/boot          not mounted
/              readonly
/usr/local     readonly
/var           r/w
/tmp           r/w
/usr/portage   r/w

Does this work? I was under the impression that /etc had to be writeable (/etc/mtab is the culprit I believe?), which forced / to rw (/etc still has to be in the same partition as /, right?). Anyway, I tend to use:


/boot          noauto
/              rw
/var           rw LVM
/usr           ro LVM (remount rw as needed)
/usr/portage   ro LVM (remount rw as needed)
/tmp           tmpfs
/home/users/*  rw LVM (one lv per user -- easier than quota :) )

which seems to work reasonably well.

If there is a way to get / ro, I'd like to hear it...

Regards,
--
Ciaran McCreesh
mail:      ciaranm*firedrop#org#uk


-- [EMAIL PROTECTED] mailing list



Reply via email to