On Thu, May 08, 2003 at 12:11:25PM -0700, TB wrote: > Seems to me having one pool of free space rather than n>1 pools > wouuld be better for this in almost all instances. Is there a > reason for preferring / to have space even when /tmp or /var is > full?
If all your filesystems are full, you may not even be able to modify a configuration file. With multiple filesystems, you at least have a chance to move the offending files out of the way, rather than having to delete it. This situation should not arise often and may not be worth the effort to split up your filesystems. > Of course if an intruder gets root he can remount the sensitive > partitions as RW, but supposedly this approach cuts off some > paths to cracking root in the first place. It slows down script kiddies. "Uhh.. how do I remount?" And depending on your paranoia, you can use an environment that does not allow the device to be remounted read-write. (I usually do not.) -Vince
