On 02/12/18 at 21:07, Dr. Nikolaus Klepp wrote:
> Am Sonntag, 2. Dezember 2018 schrieb Edward Bartolo:
>> On 02/12/2018, Dr. Nikolaus Klepp <dr.klepp@???> wrote:
>> [...]
>>> Do not use swap.
>>> Use ramfs for /tmp and /var/tmp.
>>> Turn off logging.
>>> Mount / readonly.
>>> Use "noatime" mountoption.
>>>
>> How can I use ramfs for /tmp and /var/tmp?
> In your /etc/fstab:
> tmpfs /tmp tmpfs relatime 0 1
> tmpfs /var/tmp tmpfs relatime 0 1
You'd better specify the mode=1777 mount option, to make sure the tmp
directory is going to have the Deletion Restriction Bit set.
>> And, also turn off logging?
> If you like a logfile that's available till shutdown:
> tmpfs /var/log tmpfs relatime 0 1
>
> Or disable rsyslogd .. I think it was this sequence:
> # update-rc.d rsyslog disable 2
> # update-rc.d rsyslog disable 3
> # update-rc.d rsyslog disable 4
> # update-rc.d rsyslog disable 5
update-rc.d rsyslog disable
will work for all runlevels.
--
Alessandro Selli <alessandroselli@???>
VOIP SIP: dhatarattha@???
Chiave firma e cifratura PGP/GPG signing and encoding key:
BA651E4050DDFC31E17384BABCE7BD1A1B0DF2AE