[clue-admin] Please review Member Accounts Plan on the wiki
David Anselmi
anselmi at anselmi.us
Thu Jan 6 21:47:53 MST 2005
Collins Richey wrote:
[...]
> One fairly simple change recommended by the article is to mount /home
> as a separate partition and to preclude programs from executing as
> setuid on that mountpoint. Beyond that, we probably should not have
> administrative users in the same /home partition as members.
Why not noexec for /home? Perhaps not for admins, if you give them a
separate partition.
Dave
More information about the clue-admin
mailing list