[clue-admin] Please review Member Accounts Plan on the wiki

David Anselmi anselmi at anselmi.us
Thu Jan 6 21:47:53 MST 2005


Collins Richey wrote:
[...]
> One fairly simple change recommended by the article is to mount /home
> as a separate partition and to preclude programs from executing as
> setuid on that mountpoint. Beyond that, we probably should not have
> administrative users in the same /home partition as members.

Why not noexec for /home?  Perhaps not for admins, if you give them a 
separate partition.

Dave



More information about the clue-admin mailing list