Henrique de Moraes Holschuh <h...@debian.org> writes:

> On Fri, 08 May 2009, David Weinehall wrote:
>> >         No. But we do leave /usr read-only the rest of the time, which
>> >  is often 99.999% of the time. A separate /usr is required for this.
>> 
>> Uhm, no?
>> 
>> mount --bind /usr /usr
>
> First, you'd need a RO bind mount (yes, it exists, but your command
> doesn't do it).  Second, the filesystem is still RW, so it gains you
> very little as far as data safety goes.
>
> A separate /usr *is* the way to go if you don't want any writes in
> that filesystem 99.9% of the time (i.e. when you're not doing an
> upgrade).

A read-only / does the trick just as well. And if you don't want
writes to /usr you probably don't want writes to /bin or /sbin
either. So read-only / is really the way to go. Not a strong argument
for a seperate /usr.

The other mount options like nodev or having a different filesystem
type for /usr are stronger reasons.

MfG
        Goswin


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to