R. Armiento wrote:


Good point. But if you have put everything else that requires write access in separate partitions (eg., /var, /tmp) perhaps one can mount the whole '/' filesystem read-only? I have never tried that, but if you mount /usr read-only to protect your binaries, one would think that you should want to protect your /bin and /sbin binaries in a similar way?

//Rickard



If anything, wouldn't /bin & /sbin be more important to be kept ro since this is where all the sys-critical binaries are kept (mount, lsmod, bash, etc) and also less likely to be needed to be written to.



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Reply via email to