Last modified: 2014-05-06 01:21:39 UTC
right now /tmp and /var/tmp is writable by anyone and filling it up will make all filesystem unwritable. This is a security hole that affects stability of all servers that are accessible by regular users.
well, not all, nfs will still be writable, but all local fs will not be
+ it's not a security hole, but stability hole :o
Unfortunately, that's not an easy problem. I've successfully shown on tools-webgrid-01 :-), that sudo can be used for that purpose as well, so there's no partitioning that will /ensure/ that nothing bad happens. What we should do IMHO though is actually use more available allocated space. For example, on tools-redis I used all after the recent fill-up, but on tools-login we have 40 GByte allocated, but only 10 GByte mounted. However, at the moment, I'm not sure if/how we can increase /dev/vda[12].
You can use an LVM to mount extra space wherever; on the grid nodes increasing /var/log does make sense. As for /tmp, that's a different issue. In practice, its contents can just be blown away whenever without warning so it's easy to recover then slap the culprit.
