Hello Stefan Tomanek, Am 2010-10-18 23:11:58, hacktest Du folgendes herunter: > Do you think SELinux, ACLs etc. are good ideas? They are based on the > same principles.
SELinux absolutely no. ACLs are only very rarely used by me. I had a filesystem with 15 U320 (<230 MByte/sec) drives of 300 GByte, mean realy fast and expensive drives but with arround 180mio INODES it took more then 3 days to recover from a crash, since then I have stoped SELinux and ACL plus some other tools which write several million ZERO size files into the filesystem. The biggest problem was, I was not warned about this mess. Same for "The Gimp" and VLC, mean, I set the diretory permission to 000 and does not more allow to write to it. If a program crash because it can not write its crap, I deinstall it and will never recommend it to anyone.. Note: Programs which disallow to disable such things are crap. So for "wget" it should only be used if the user set explicite a commandline option or in the wgetrc. Of course, it should not activated hardcoded or as a default in the wgetrc. Thanks, Greetings and nice Day/Evening Michelle Konzack -- ##################### Debian GNU/Linux Consultant ###################### Development of Intranet and Embedded Systems with Debian GNU/Linux itsyst...@tdnet France EURL itsyst...@tdnet UG (limited liability) Owner Michelle Konzack Owner Michelle Konzack Apt. 917 (homeoffice) 50, rue de Soultz Kinzigstraße 17 67100 Strasbourg/France 77694 Kehl/Germany Tel: +33-6-61925193 mobil Tel: +49-177-9351947 mobil Tel: +33-9-52705884 fix <http://www.itsystems.tamay-dogan.net/> <http://www.flexray4linux.org/> <http://www.debian.tamay-dogan.net/> <http://www.can4linux.org/> Jabber linux4miche...@jabber.ccc.de ICQ #328449886 Linux-User #280138 with the Linux Counter, http://counter.li.org/
signature.pgp
Description: Digital signature