Why you need separate root and /usr partitions
Submitted by wh5a on Tue, 08/26/2008 - 14:16.
via LWN.
A user can do ln /usr/sbin/sendmail ~/sendmail then wait for a security bug to be reported in sendmail. Even though the administrator upgrades /usr/sbin/sendmail the buggy setuid sendmail is still available in the user's home directory.
This is one reason to have separate root and /usr partitions, because hardlinking across filesystems isn't possible.
/home
Doesn't it make a lot more sense for /home and /tmp to be on a separate partitions.
Solves the same problem, and they are both partitions that you don't want stealing space.
Sounds right. Thanks!
Sounds right. Thanks!
Post new comment