- Oct 24, 2000
- 29,767
- 33
- 81
Despite the fact I am playing with Ubuntu Server 5.10, I can't help but go back and read the excellent documentation provided by the Gentoo folks.
If you read their Gentoo Security Handbook, one of the things they list under "Partitioning Schemes" is...
Any directory tree a user should be able to write to (e.g. /home, /tmp) should be on a separate partition and use disk quotas. This reduces the risk of a user filling up your whole filesystem.
This has the added advantage of being able to re-install the OS without losing your data if it's all located on a different partition.
Is the following an example of a partition table that would satisfy this security requirement?
Filesystem Type Size Used Avail Use% Mounted on
/dev/hda5 ext3 509M 132M 351M 28% /
/dev/hda2 ext3 5.0G 3.0G 1.8G 63% /home
/dev/hda7 ext3 7.9G 6.2G 1.3G 83% /usr
/dev/hda8 ext3 1011M 483M 477M 51% /opt
/dev/hda9 ext3 2.0G 607M 1.3G 32% /var
/dev/hda1 ext2 51M 17M 31M 36% /boot
/dev/hda6 swap 516M 12M 504M 2% <not mounted>
(Unpartitioned space for future usage: 2 GB)
The next question would be, how do you do this in Ubuntu? I saw during the installation you could edit partition tables. So I suppose you can.
If you read their Gentoo Security Handbook, one of the things they list under "Partitioning Schemes" is...
Any directory tree a user should be able to write to (e.g. /home, /tmp) should be on a separate partition and use disk quotas. This reduces the risk of a user filling up your whole filesystem.
This has the added advantage of being able to re-install the OS without losing your data if it's all located on a different partition.
Is the following an example of a partition table that would satisfy this security requirement?
Filesystem Type Size Used Avail Use% Mounted on
/dev/hda5 ext3 509M 132M 351M 28% /
/dev/hda2 ext3 5.0G 3.0G 1.8G 63% /home
/dev/hda7 ext3 7.9G 6.2G 1.3G 83% /usr
/dev/hda8 ext3 1011M 483M 477M 51% /opt
/dev/hda9 ext3 2.0G 607M 1.3G 32% /var
/dev/hda1 ext2 51M 17M 31M 36% /boot
/dev/hda6 swap 516M 12M 504M 2% <not mounted>
(Unpartitioned space for future usage: 2 GB)
The next question would be, how do you do this in Ubuntu? I saw during the installation you could edit partition tables. So I suppose you can.