October 2022
Intermediate to advanced
500 pages
19h 57m
English
book
Security Strategies in Linux Platforms and Applications, 3rd Edition
by Ric Messier, Michael Jang
Content preview from Security Strategies in Linux Platforms and Applications, 3rd Edition
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
Best Practices: Filesystems, Volumes, and Encryption
If you understand the FHS, you’ll know which directories can be mounted using mount points on separate volumes. More importantly, you’ll know which directories should be mounted on separate mount points to help protect the system in case a malicious user manages to compromise your system. Candidate directories for separate mount points include /boot/, /home/, /opt/, /srv/, /tmp/, and /var/. Appropriate subdirectories can also be considered for separate mount points.
The right filesystem format can also help protect the system in case of a break-in. Journaling filesystems such as ext3, ext4, xfs, and reiserfs can speed recovery in case of problems. However, journaling takes extra space and ...