Re: Experiences with FreeBSD 9.0-BETA2

看板FB_current作者時間14年前 (2011/09/27 18:01), 編輯推噓0(000)
留言0則, 0人參與, 最新討論串31/45 (看更多)
Holger Kipp <Holger.Kipp@alogis.com> writes: > Am 27.09.2011 um 10:48 schrieb Thomas Mueller: > >>> From Brett Glass <brett@lariat.net>: >> >>> Unfortunately, due to past history, /usr is mixed-use. It normally >>> contains both configuration information -- e.g. /usr/local/etc -- >>> and more volatile data such as users' home directories. This >>> prevents /usr/local/etc, which also contains mission-critical >>> configuration information, from being protected if you just protect >>> /. Some proprietary Unices have fixed this historical flaw in the >>> traditional hierarchy by moving /usr/local/etc to another location >>> and them symlinking it back to where seasoned administrators expect >>> it to be, thus honoring POLA. The three open source, old school >>> BSDs (Free, Net, Open) have not done this to date, but it's >>> something that should be considered in the long run. It would >>> certainly make the creation of embedded systems easier, as well as >>> enhancing security in multi-user systems! >> >> You mean users' home directories are under /usr/home rather than /home? >> >> I believe /home is more traditional, and decidedly my preference: >> good to put on a separate partition so it won't be touched by a >> system upgrade. > > Afaik /home has always been a symlink to /usr/home (unless you created a > separate /home-partition within FreeBSD). So it is up to the admin what > he chooses to do. Interesting, there is no mention of /home in hier(7). I guess it can be anything (without symlink) unlike, say, /compat stuff which needs at least symlink for `emulation tree' to work. _______________________________________________ freebsd-current@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org"
文章代碼(AID): #1EWPxURk (FB_current)
討論串 (同標題文章)
文章代碼(AID): #1EWPxURk (FB_current)