[clue-admin] Please review Member Accounts Plan on the wiki
    David Anselmi 
    anselmi at anselmi.us
       
    Thu Jan  6 21:47:53 MST 2005
    
    
  
Collins Richey wrote:
[...]
> One fairly simple change recommended by the article is to mount /home
> as a separate partition and to preclude programs from executing as
> setuid on that mountpoint. Beyond that, we probably should not have
> administrative users in the same /home partition as members.
Why not noexec for /home?  Perhaps not for admins, if you give them a 
separate partition.
Dave
    
    
More information about the clue-admin
mailing list