/tmp on tmpfs

Steve Clark sclark at netwolves.com
Tue Apr 3 13:38:59 UTC 2012


On 04/02/2012 05:30 PM, M A Young wrote:
> On Mon, 2 Apr 2012, Lennart Poettering wrote:
>
>> On Mon, 02.04.12 16:55, Steve Grubb (sgrubb at redhat.com) wrote:
>>> What about forensics? Any reboot erases information that might have been needed
>>> to see what happened during a break in.
>> /tmp is already volatile and cleaned up in regular intervals. The new
>> clean-up on boot is just one tiny bit of additional clean-up.
> there is a big difference however with files in /tmp being around for 30
> days, and the files being cleaned on a reboot, which might be necessary to
> get the system in a reliable enough state to do any forensics.
>
> This also means a big change in user experience as many will be expecting
> things in /tmp to remain there for a while before being deleted even if
> the system is restarted or crashes.
>
>   	Michael Young
I agree why does this have to be forced on everyone. Admins have the ability to do this now if they
want to.

-- 
Stephen Clark
*NetWolves*
Director of Technology
Phone: 813-579-3200
Fax: 813-882-0209
Email: steve.clark at netwolves.com
http://www.netwolves.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20120403/01bda5e8/attachment.html>


More information about the devel mailing list