On 20/01/15 11:53, Jaroslav Reznik wrote:
* Other developers:
** Add /tmp-inst and /var/tmp/tmp-inst to filesystem. (packagename: filesystem)
** Enable namespaces in /etc/security/namespace.conf (packagename: PAM)
** Enable proper selinux context and polyinstantiation_enabled boolean to be
set (packagename: selinux-policy-targeted or selinux-policy)
So this effectively reverses tmp-on-tmpfs for users other than root and
adm right? Because /tmp will actually be a subdirectory of /tmp-inst
which will be a real directory?
Incidentally, why /tmp-inst but /var/tmp/tmp-inst? Why not /tmp/tmp-inst
for /tmp or /var/tmp-inst for /var/tmp? Shouldn't the naming be consistent?
Tom
--
Tom Hughes (tom(a)compton.nu)
http://compton.nu/