also sprach Douglas A. Tutty <dtu...@vianet.ca> [2009.04.09.1532 +0200]:
> > On the other hand, having / in LVM means:
> > * you can enlarge / when necessary;
> 
> You should never have to enlarge a 500 MB /

I bet you'll be wrong in 10 years.

> > * you can encrypt / if desired;
> 
> Why would you need / encrypted (if swap, /tmp, /home, and parts of /var
> are encrypted)?

Because it contains e.g. /bin/ls and you don't want that to be
trojaned. Obviously, an integrity checker can also help.

-- 
 .''`.   martin f. krafft <madd...@d.o>      Related projects:
: :'  :  proud Debian developer               http://debiansystem.info
`. `'`   http://people.debian.org/~madduck    http://vcs-pkg.org
  `-  Debian - when you have better things to do than fixing systems
 
"in any hierarchy, each individual rises
 to his own level of incompetence,
 and then remains there."
                               -- murphy (after dr. laurence j. peter)

Attachment: digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)

Reply via email to